meshagent | 6c5767dc431add84916122b9dfa046bd1915ef5beac609d00eadcb52f2d47656

General

Target

2025-02-03_81e41ac86da8cac58e81bbfdfee0d969_ismagent_ryuk_sliver
Size

3.3MB
Sample

250203-a4xbxatnfs
MD5

81e41ac86da8cac58e81bbfdfee0d969
SHA1

1d893b5c64b8dc62ad08d5fe96e02d95b33c6b3f
SHA256

6c5767dc431add84916122b9dfa046bd1915ef5beac609d00eadcb52f2d47656
SHA512

5fbe23d56b2bb9897cd1702836685d2368d6091df97bea0255e56d30b92c0a79e37e8ec4154633dcd82236986ca9693b0bd7a3d430dcaccb7e5333442926237b
SSDEEP

49152:8f708gNcR9l5NyQB7q1AlgraPgDLDVXI2RXgGfX2kMFvfAw6dZ7Nueuxg5A4:8+49lnyeG3D56gXm6Hq4

Score

10^/10

Family

meshagent

Version

2

Botnet

ООО "Цитадель"(78116334UL)

C2

http://meshcent.its.ufanet.ru:443/agent.ashx

Attributes

mesh_id
0xB2ACF6033BDB7ED54FDA6EDB7BDB8664E1AE2395DD788396A6074FFD3569827FFA945F319B20FE97A2FF51A3AA9ADEF2
server_id
92361DD62E17552490F9968C444EAF21618626EC916098B7A27028E3759BECFC00603247A5829F7E5F230D03F82213BF
wss
wss://meshcent.its.ufanet.ru:443/agent.ashx