Overview

overview

10

Static

static

10

2025-02-28...er.exe

windows7-x64

1

2025-02-28...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-02-28_73805f6b0d2919481493623dcef5bc97_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    250228-lzzr1sypy7

  • MD5

    73805f6b0d2919481493623dcef5bc97

  • SHA1

    4705155ce5441ef980fd33fdb198ba9f7f674726

  • SHA256

    50839c33add586e382606c72dfcede472e1cb3b5de85df1f090d2e13eb080d18

  • SHA512

    128c7586508e82a3c50a3488b074d0d7baa23c644adadd2bcacd8d5567ba3bf3eb1f1f645d1007c5af017680975da976619d981a120656eb11e050ca57abbfce

  • SSDEEP

    49152:gX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qd:glRsZ47/QXoHUOfAoj1x6d

Score
10/10
meshagentpetitjean

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

Petitjean

C2

http://central.petitjean.fr:443/agent.ashx

Attributes
  • mesh_id

    0x5D53840ABD0D80226939343B23D02C142121CB9E70580691A30A2E3E8B59965A7CD9ABC278EC6185F13E93F06D27B278

  • server_id

    B033757CB46637E056088B7508D9AA2704755BFF589B5DDCE8ADF15E7C9B878B3634ED22B5FAADF44F9DCC0B42075123

  • wss

    wss://central.petitjean.fr:443/agent.ashx

Targets

    • Target

      2025-02-28_73805f6b0d2919481493623dcef5bc97_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      73805f6b0d2919481493623dcef5bc97

    • SHA1

      4705155ce5441ef980fd33fdb198ba9f7f674726

    • SHA256

      50839c33add586e382606c72dfcede472e1cb3b5de85df1f090d2e13eb080d18

    • SHA512

      128c7586508e82a3c50a3488b074d0d7baa23c644adadd2bcacd8d5567ba3bf3eb1f1f645d1007c5af017680975da976619d981a120656eb11e050ca57abbfce

    • SSDEEP

      49152:gX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qd:glRsZ47/QXoHUOfAoj1x6d

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks