General
-
Target
2025-02-13_8f0ab19d8f29f486610e9d9e84e22603_ismagent_ryuk_sliver
-
Size
3.3MB
-
Sample
250213-w34kgsskev
-
MD5
8f0ab19d8f29f486610e9d9e84e22603
-
SHA1
c3e515ab3194ce02b5825cb0289de7ec8a779ee8
-
SHA256
122f7d782722411d52d5feb14af59e4b26e14fe0348cb5de6ad07df57ea58319
-
SHA512
2a00de78b19535ca24cb3cb81795370599d217334d35bcb0de45d7555b22df6db3a737a87b9a140824a38047cdccedf65528338feb698400b98d0922457214d8
-
SSDEEP
49152:RX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QV:RlRsZ47/QXoHUOfAoj1x6V
Behavioral task
behavioral1
Sample
2025-02-13_8f0ab19d8f29f486610e9d9e84e22603_ismagent_ryuk_sliver.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
2025-02-13_8f0ab19d8f29f486610e9d9e84e22603_ismagent_ryuk_sliver.exe
Resource
win10v2004-20250207-en
Malware Config
Extracted
meshagent
2
Uceda School
http://mesh.opennology.com:443/agent.ashx
-
mesh_id
0x9DC15773E7809EA7021319CED7C05D0A849E7879500B0555B6C07CC4143DCE5D0511D37B5D3E42271B9DE7AC9E63C0DC
-
server_id
E3DD584A444F5D46BD73BC240A86DB2E8441224EF95FD1A7CCE7925CBB52BDE54BFCD2F8708D1B10984832EFA9E2CBEA
-
wss
wss://mesh.opennology.com:443/agent.ashx
Targets
-
-
Target
2025-02-13_8f0ab19d8f29f486610e9d9e84e22603_ismagent_ryuk_sliver
-
Size
3.3MB
-
MD5
8f0ab19d8f29f486610e9d9e84e22603
-
SHA1
c3e515ab3194ce02b5825cb0289de7ec8a779ee8
-
SHA256
122f7d782722411d52d5feb14af59e4b26e14fe0348cb5de6ad07df57ea58319
-
SHA512
2a00de78b19535ca24cb3cb81795370599d217334d35bcb0de45d7555b22df6db3a737a87b9a140824a38047cdccedf65528338feb698400b98d0922457214d8
-
SSDEEP
49152:RX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QV:RlRsZ47/QXoHUOfAoj1x6V
Score8/10-
Downloads MZ/PE file
-