Overview

overview

10

Static

static

10

2025-02-20...er.exe

windows7-x64

1

2025-02-20...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-20_65c336e5cfc99ba20c246bd0f05b4d89_ismagent_ryuk_sliver

  • Size

    3.4MB

  • Sample

    250220-w1nfgstnz5

  • MD5

    65c336e5cfc99ba20c246bd0f05b4d89

  • SHA1

    6e6f0c509294eb90ccf976abb403c3a480095922

  • SHA256

    b1d7455def5f57761700f65cdc4d3206c29e484151285920fb8139f24c05f176

  • SHA512

    d8d39b825a13c725bcfecb4763806780f6e6cc85c73ede459de3086cffb8a02088d0e152462e0b1c8c373dea8971d8f9683ea6dc189c257e24fd52ac6c6d1d26

  • SSDEEP

    49152:SdZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/wZ7IbOjx858:qHvfGfZvZj1/N/z/A8e

Score
10/10
meshagentsrk

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

srk

C2

http://remoteshare.in:444/agent.ashx

Attributes
  • mesh_id

    0x2BE2DFAE36C3BA57528CB6EE486473D74A18F9A4FC763146B24E4C180639E02198F3105978617EBDAC1A16F5EA35CA83

  • server_id

    C6DE5260F3DF733E712F21316EE6EE643ABC568C44EC1AE991C57525DD26FAF883ED8D9A208F6CD34C3CC1CF7943ECD7

  • wss

    wss://remoteshare.in:444/agent.ashx

Targets

    • Target

      2025-02-20_65c336e5cfc99ba20c246bd0f05b4d89_ismagent_ryuk_sliver

    • Size

      3.4MB

    • MD5

      65c336e5cfc99ba20c246bd0f05b4d89

    • SHA1

      6e6f0c509294eb90ccf976abb403c3a480095922

    • SHA256

      b1d7455def5f57761700f65cdc4d3206c29e484151285920fb8139f24c05f176

    • SHA512

      d8d39b825a13c725bcfecb4763806780f6e6cc85c73ede459de3086cffb8a02088d0e152462e0b1c8c373dea8971d8f9683ea6dc189c257e24fd52ac6c6d1d26

    • SSDEEP

      49152:SdZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/wZ7IbOjx858:qHvfGfZvZj1/N/z/A8e

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks