General
- Target 2025-02-21_7ae0a1792b3b4f08058dee62e69de2e0_ismagent_ryuk_sliver
- Size 3.3MB
- Sample250221-m4l76asms4
- SHA256 29cbf2d02818809ba4125c50ae1ddc25496c331622acc08ea4a1aeac883b9df1
- MD5 7ae0a1792b3b4f08058dee62e69de2e0
- SHA1 a77e78a8641255c53d5fce6e508bdba0b456f391
- SHA512 47c3d6eb2112193c8f18d6675162af5aec21db8a382e1c6fd36b862cff2d514fa71cfbec7880cf117d78bc3e72fd2900f19e6c621b3513dc4d20cb7a21bd48e7
- SSDEEP 49152:rX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QF:rlRsZ47/QXoHUOfAoj1x6F
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2025-02-21_7ae0a1792b3b4f08058dee62e69de2e0_ismagent_ryuk_sliver.exe
Resource
win7-20240903-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2025-02-21_7ae0a1792b3b4f08058dee62e69de2e0_ismagent_ryuk_sliver.exe
Resource
win10v2004-20250217-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
meshagent
Version
-
2
Botnet
-
New remote
C2
-
http://flancer.micomputer.support:443/agent.ashx
Attributes
-
mesh_id
0x40BAC3D4ED54CD48DF738147F490FDB33684EF8DD6FD1D4FB7AF344FECFBCBE887EDA461A86DB77BB4CFAEABBA1193D5
-
server_id
705959748BD21700D70DF3A655C1FE9757DD8BC3F6057884E9A0247289DEC4CA0187D2D13EA412489AFEE714C7AB77A2
-
wss
wss://flancer.micomputer.support:443/agent.ashx
Targets
-
- Target 2025-02-21_7ae0a1792b3b4f08058dee62e69de2e0_ismagent_ryuk_sliver
- Size 3.3MB
- SHA256 29cbf2d02818809ba4125c50ae1ddc25496c331622acc08ea4a1aeac883b9df1
- MD5 7ae0a1792b3b4f08058dee62e69de2e0
- SHA1 a77e78a8641255c53d5fce6e508bdba0b456f391
- SHA512 47c3d6eb2112193c8f18d6675162af5aec21db8a382e1c6fd36b862cff2d514fa71cfbec7880cf117d78bc3e72fd2900f19e6c621b3513dc4d20cb7a21bd48e7
- SSDEEP 49152:rX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QF:rlRsZ47/QXoHUOfAoj1x6F
- MD5 SHA1 SHA512 SSDEEP
Score1/10