General

  • Target

    2025-02-13_8f0ab19d8f29f486610e9d9e84e22603_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    250213-w34kgsskev

  • MD5

    8f0ab19d8f29f486610e9d9e84e22603

  • SHA1

    c3e515ab3194ce02b5825cb0289de7ec8a779ee8

  • SHA256

    122f7d782722411d52d5feb14af59e4b26e14fe0348cb5de6ad07df57ea58319

  • SHA512

    2a00de78b19535ca24cb3cb81795370599d217334d35bcb0de45d7555b22df6db3a737a87b9a140824a38047cdccedf65528338feb698400b98d0922457214d8

  • SSDEEP

    49152:RX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QV:RlRsZ47/QXoHUOfAoj1x6V

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

Uceda School

C2

http://mesh.opennology.com:443/agent.ashx

Attributes
  • mesh_id

    0x9DC15773E7809EA7021319CED7C05D0A849E7879500B0555B6C07CC4143DCE5D0511D37B5D3E42271B9DE7AC9E63C0DC

  • server_id

    E3DD584A444F5D46BD73BC240A86DB2E8441224EF95FD1A7CCE7925CBB52BDE54BFCD2F8708D1B10984832EFA9E2CBEA

  • wss

    wss://mesh.opennology.com:443/agent.ashx

Targets

    • Target

      2025-02-13_8f0ab19d8f29f486610e9d9e84e22603_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      8f0ab19d8f29f486610e9d9e84e22603

    • SHA1

      c3e515ab3194ce02b5825cb0289de7ec8a779ee8

    • SHA256

      122f7d782722411d52d5feb14af59e4b26e14fe0348cb5de6ad07df57ea58319

    • SHA512

      2a00de78b19535ca24cb3cb81795370599d217334d35bcb0de45d7555b22df6db3a737a87b9a140824a38047cdccedf65528338feb698400b98d0922457214d8

    • SSDEEP

      49152:RX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QV:RlRsZ47/QXoHUOfAoj1x6V

    Score
    8/10
    • Downloads MZ/PE file

MITRE ATT&CK Enterprise v15

Tasks