Overview

overview

10

Static

static

10

2025-02-07...er.exe

windows7-x64

1

2025-02-07...er.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-07_efc75e9ca53e50a2735c8ba1c5b2e395_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    250207-vz39wazmey

  • MD5

    efc75e9ca53e50a2735c8ba1c5b2e395

  • SHA1

    b9b683d4cae51728959c6c59cffada23ac476615

  • SHA256

    e39ebd85fb0fd81242798392d370adbf7468ccee9e03bd5dc1b047bf6e464fe2

  • SHA512

    413c083fdc52ebe52375e7968c829c4dfa5ae99ea95f0bcb966afdb8e2d942c3bb017c4364a93719e02f8a5ff0a8fd5e820dd8bac34b38a944e7a80a8a36072c

  • SSDEEP

    49152:dX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qz:dlRsZ47/QXoHUOfAoj1x6z

Score
10/10
meshagenttestagentdiscovery

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

testagent

C2

http://10.10.88.10:443/agent.ashx

Attributes
  • mesh_id

    0x23406E6B468B96E7A03D46DEEDAEEFC36C06439187D242F744CF3663349D13826C8ED575D0B3C4AC005B7F9D889610B3

  • server_id

    DBE9C657E8AA21E5BA18BDC16C07F84F64D218551AAF194BACD62D8A5A58C7385FEE2262769649192524B15F02F1F73E

  • wss

    wss://10.10.88.10:443/agent.ashx

Targets

    • Target

      2025-02-07_efc75e9ca53e50a2735c8ba1c5b2e395_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      efc75e9ca53e50a2735c8ba1c5b2e395

    • SHA1

      b9b683d4cae51728959c6c59cffada23ac476615

    • SHA256

      e39ebd85fb0fd81242798392d370adbf7468ccee9e03bd5dc1b047bf6e464fe2

    • SHA512

      413c083fdc52ebe52375e7968c829c4dfa5ae99ea95f0bcb966afdb8e2d942c3bb017c4364a93719e02f8a5ff0a8fd5e820dd8bac34b38a944e7a80a8a36072c

    • SSDEEP

      49152:dX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qz:dlRsZ47/QXoHUOfAoj1x6z

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks