Overview

overview

10

Static

static

10

2025-02-07...er.exe

windows7-x64

1

2025-02-07...er.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-07_c81b268db51ee927932ffb6a946d6b24_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    250207-vzt17s1nel

  • MD5

    c81b268db51ee927932ffb6a946d6b24

  • SHA1

    e7401629a42ba4bb33d13ae11a1db2e711113163

  • SHA256

    be3ad89a97f1b189a784d72ddfae6e95a05aeecbe775df1cd2e338a6686eb98f

  • SHA512

    ad2fd22cd38a5b1181054bb9fcd9e7242ae911a9bad646cad6616440edb9e379a01c2bc0fe24c1e25b45342e23887baebfeaa4a2ff4a7928265f6686bb9cc847

  • SSDEEP

    49152:6X3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qe:6lRsZ47/QXoHUOfAoj1x6e

Score
10/10
meshagenttestagentdiscovery

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

testagent

Attributes
  • mesh_id

    0x23406E6B468B96E7A03D46DEEDAEEFC36C06439187D242F744CF3663349D13826C8ED575D0B3C4AC005B7F9D889610B3

  • server_id

    DBE9C657E8AA21E5BA18BDC16C07F84F64D218551AAF194BACD62D8A5A58C7385FEE2262769649192524B15F02F1F73E

  • wss

    localhost

Targets

    • Target

      2025-02-07_c81b268db51ee927932ffb6a946d6b24_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      c81b268db51ee927932ffb6a946d6b24

    • SHA1

      e7401629a42ba4bb33d13ae11a1db2e711113163

    • SHA256

      be3ad89a97f1b189a784d72ddfae6e95a05aeecbe775df1cd2e338a6686eb98f

    • SHA512

      ad2fd22cd38a5b1181054bb9fcd9e7242ae911a9bad646cad6616440edb9e379a01c2bc0fe24c1e25b45342e23887baebfeaa4a2ff4a7928265f6686bb9cc847

    • SSDEEP

      49152:6X3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qe:6lRsZ47/QXoHUOfAoj1x6e

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks