Overview

overview

10

Static

static

10

2025-02-28...er.exe

windows7-x64

1

2025-02-28...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-28_4983556159f522664687a8e213a9bb15_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    250228-1y3vlszqz4

  • MD5

    4983556159f522664687a8e213a9bb15

  • SHA1

    f250ab61672212cee8a805fac3dbba095f3ee4f6

  • SHA256

    b5705e3be1775e3c9e20aeffa15c3dc612ab59fc12bc2e2ee41bb4614517c53c

  • SHA512

    2b1ec06323eb2553afb626467dfeabc2bacd2fb4619c8308015725d194e1fb20439e6c4f3fa003263291bac7d86bdfad0ef117c6ee655bf5ef2127ef0b2d1f07

  • SSDEEP

    49152:KX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qo:KlRsZ47/QXoHUOfAoj1x6o

Score
10/10
meshagenthelp

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

HELP

C2

http://cc.112pc.it:443/agent.ashx

Attributes
  • mesh_id

    0xE4C72D0D6A49E7A992D09E9FD7FF58BEAF7394C9019B153035D2AF0A489E252DA4445C3B07BA3BFC1C3EA04758398856

  • server_id

    04993CF6BA4F65FDE1CA52F3DEC5C9E20D436F39854FA1F5C602CFD9FE5124A8CE8B84F084ADD8C6CEF8C17B7907B3A7

  • wss

    wss://cc.112pc.it:443/agent.ashx

Targets

    • Target

      2025-02-28_4983556159f522664687a8e213a9bb15_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      4983556159f522664687a8e213a9bb15

    • SHA1

      f250ab61672212cee8a805fac3dbba095f3ee4f6

    • SHA256

      b5705e3be1775e3c9e20aeffa15c3dc612ab59fc12bc2e2ee41bb4614517c53c

    • SHA512

      2b1ec06323eb2553afb626467dfeabc2bacd2fb4619c8308015725d194e1fb20439e6c4f3fa003263291bac7d86bdfad0ef117c6ee655bf5ef2127ef0b2d1f07

    • SSDEEP

      49152:KX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qo:KlRsZ47/QXoHUOfAoj1x6o

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks