Overview

overview

10

Static

static

10

2025-02-20...er.exe

windows7-x64

1

2025-02-20...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-20_991aca786ba3dcba439638155d802fdc_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    250220-z61jsavrgl

  • MD5

    991aca786ba3dcba439638155d802fdc

  • SHA1

    f6cc0fff65bea7131cb4495633db462229270dcd

  • SHA256

    04a842719bbfccfabe5610d784e2976c1f9f3dfba7438380a3159e16673fbef7

  • SHA512

    edab633658a49a0d4c3d0927d70201080e574c7cdf8bed67a17e2c9e74521772851d68363c27c20a32de64b3a90b993404ba88bb0ba0335e447116a7f548c229

  • SSDEEP

    49152:uX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QW+:ulRsZ47/QXoHUOfAoj1x6W+

Score
10/10
meshagentagents cpa

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

agents cpa

C2

http://connect.davemanamalcombackup.online:443/agent.ashx

Attributes
  • mesh_id

    0x13AFC70C18771D3A11AD4C4F03745ADF908E36378E44293B182EB6B7351F4EFC5CC851ECCDD1152BA3EAC2B43C585D9B

  • server_id

    82F3ECC61AB09DAB96EBD7CD4221CB1DD2903655BE154F1AD77425DD0350C70BF0EE4D1B74AA4BF8F583219F76CA0ABA

  • wss

    wss://connect.davemanamalcombackup.online:443/agent.ashx

Targets

    • Target

      2025-02-20_991aca786ba3dcba439638155d802fdc_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      991aca786ba3dcba439638155d802fdc

    • SHA1

      f6cc0fff65bea7131cb4495633db462229270dcd

    • SHA256

      04a842719bbfccfabe5610d784e2976c1f9f3dfba7438380a3159e16673fbef7

    • SHA512

      edab633658a49a0d4c3d0927d70201080e574c7cdf8bed67a17e2c9e74521772851d68363c27c20a32de64b3a90b993404ba88bb0ba0335e447116a7f548c229

    • SSDEEP

      49152:uX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QW+:ulRsZ47/QXoHUOfAoj1x6W+

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks