Overview

overview

10

Static

static

10

2025-02-03...er.exe

windows7-x64

1

2025-02-03...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-03_01232c309f536302c6572254c7881d52_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    250203-pk183s1kcv

  • MD5

    01232c309f536302c6572254c7881d52

  • SHA1

    e15d7e00dd4d5111f36c3d45e9aaddc4325705d5

  • SHA256

    049ec4fc4ace4e1355b7d9d17fb9605669a27a5d9a10c94dd626d66fe00702f4

  • SHA512

    c5361d5c11c4a4f1f98915ca3d527b4ac92642bc738c7e94b9231bbf98f4a845e742c11aab5f0868803d21e581623fc0aa7c5c68526ae766f7fee5a3af8f4d59

  • SSDEEP

    49152:bX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Q7:blRsZ47/QXoHUOfAoj1x67

Score
10/10
meshagentufficio centrale

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

Ufficio centrale

Attributes
  • mesh_id

    0xCF4703C63DE2185007AE7E3D1037522665AB72BCF68E9DA878BB4B8CC5B0F8B04B4C5A71F6E432AF048935BEABFAB539

  • server_id

    C844A52E8AFA7847BCFA33DD96296EF708D2244276D62A7963124200D2D72F3479BA4506C22A6F1B0D9683D4224D0ED5

  • wss

    localhost

Targets

    • Target

      2025-02-03_01232c309f536302c6572254c7881d52_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      01232c309f536302c6572254c7881d52

    • SHA1

      e15d7e00dd4d5111f36c3d45e9aaddc4325705d5

    • SHA256

      049ec4fc4ace4e1355b7d9d17fb9605669a27a5d9a10c94dd626d66fe00702f4

    • SHA512

      c5361d5c11c4a4f1f98915ca3d527b4ac92642bc738c7e94b9231bbf98f4a845e742c11aab5f0868803d21e581623fc0aa7c5c68526ae766f7fee5a3af8f4d59

    • SSDEEP

      49152:bX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Q7:blRsZ47/QXoHUOfAoj1x67

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks