Overview

overview

10

Static

static

10

2025-02-02...er.exe

windows7-x64

1

2025-02-02...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-02_aad958ebfa3e5ca2e0dea4486f86e476_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    250202-plbd2s1nds

  • MD5

    aad958ebfa3e5ca2e0dea4486f86e476

  • SHA1

    ea071f48c7317d6da1fb6c241d98ea7948b2814a

  • SHA256

    594e6d82b95481aba795e44ba471419002d3ef6553044b2ba7a72e439705534f

  • SHA512

    64e64df9740b56af57216d5e9068ddc32ed09356545dc0dad640ebdc11488ca29e540532974474ade7b9efc70e6aee608203f54a6baa5cff72c6328f675bad40

  • SSDEEP

    49152:NX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QF:NlRsZ47/QXoHUOfAoj1x6F

Score
10/10
meshagentservers

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

servers

Attributes
  • mesh_id

    0x11B362244DA89DCCB6ED189CD150B3064F03073A78DFCF25B325A49E86D445B7C531589DDD2667D8D0902A6C7E8B093F

  • server_id

    D404FD6F765F7B646DE7B3B5780C1B8F454B00724880F2CEB1AB527C2D74E6F56ECDD4C0E709B2988FBA937A99FC4767

  • wss

    localhost

Targets

    • Target

      2025-02-02_aad958ebfa3e5ca2e0dea4486f86e476_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      aad958ebfa3e5ca2e0dea4486f86e476

    • SHA1

      ea071f48c7317d6da1fb6c241d98ea7948b2814a

    • SHA256

      594e6d82b95481aba795e44ba471419002d3ef6553044b2ba7a72e439705534f

    • SHA512

      64e64df9740b56af57216d5e9068ddc32ed09356545dc0dad640ebdc11488ca29e540532974474ade7b9efc70e6aee608203f54a6baa5cff72c6328f675bad40

    • SSDEEP

      49152:NX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QF:NlRsZ47/QXoHUOfAoj1x6F

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks