Overview

overview

10

Static

static

10

2025-02-24...er.exe

windows7-x64

1

2025-02-24...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-24_0cba4eb8c76fd5be776fb872406f341c_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    250224-y5rd2stlw9

  • MD5

    0cba4eb8c76fd5be776fb872406f341c

  • SHA1

    6c74449a3c331dba1c1407a820f72629ff0633d0

  • SHA256

    30cc6997dfabed2ddb2012715b90921e1931a160d78a0a78f33d4c8ae2b2ed94

  • SHA512

    685e0d5d92aff92c3069b3e9457d9473d7535c7939cac308a17fee40eff125f55a43acddaa202da82abed7a60f6433a67e1f0c42a39740b87feb1007bc22b3d2

  • SSDEEP

    49152:/X3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qn:/lRsZ47/QXoHUOfAoj1x6n

Score
10/10
meshagentall documents

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

all documents

C2

http://remotesupport.cakebaddie.com:443/agent.ashx

Attributes
  • mesh_id

    0x0F1CA4D38D80AEBCA9CD5B75EACFAD71A48FC383EE848429770A372F0564D4624EF02EFFB3D6D6B007A59558A4805AA9

  • server_id

    8BB5DBCE321BD6E55CF04BAA59F632DD48B880BEAB0255F5AD1CB17F68B013E88D6A56F3025202D73010C300457ED120

  • wss

    wss://remotesupport.cakebaddie.com:443/agent.ashx

Targets

    • Target

      2025-02-24_0cba4eb8c76fd5be776fb872406f341c_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      0cba4eb8c76fd5be776fb872406f341c

    • SHA1

      6c74449a3c331dba1c1407a820f72629ff0633d0

    • SHA256

      30cc6997dfabed2ddb2012715b90921e1931a160d78a0a78f33d4c8ae2b2ed94

    • SHA512

      685e0d5d92aff92c3069b3e9457d9473d7535c7939cac308a17fee40eff125f55a43acddaa202da82abed7a60f6433a67e1f0c42a39740b87feb1007bc22b3d2

    • SSDEEP

      49152:/X3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qn:/lRsZ47/QXoHUOfAoj1x6n

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks