Overview

overview

10

Static

static

10

2025-03-01...er.exe

windows7-x64

1

2025-03-01...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-01_5fd2c39dc836091332bb93957a6d12e3_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    250301-pq1jqs1qz5

  • MD5

    5fd2c39dc836091332bb93957a6d12e3

  • SHA1

    95c48fd986ac45bb9e4712a73e04f366163f7a84

  • SHA256

    b04a91f2498165cace9785ac6483e03a3af5a507322eab4238e69f3a2aeff54e

  • SHA512

    c750e3545b22b9bfb796c101b05d30840cca6845cd2006a48a336767b0a4beb3cb3b54c95deed0df2d58716e2db0a0b891a8ae102d6f089cd22994392cc9faaf

  • SSDEEP

    49152:lX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qq:llRsZ47/QXoHUOfAoj1x6q

Score
10/10
meshagentssc-group

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

SSC-Group

C2

http://meshcentral.pu.edu:443/agent.ashx

Attributes
  • mesh_id

    0xEA443601361F343627950C4F61059C7D33D00E7B2F44129220480264CA8A72AC9F55C834834D00A1473F5868160A187A

  • server_id

    13BE193E2953DCCF8DDE766C8E7B241DE0C08DFD73F6A66BF3FCD78ED90081F9A355487DBAB62E1D6CA110891C1179B6

  • wss

    wss://meshcentral.pu.edu:443/agent.ashx

Targets

    • Target

      2025-03-01_5fd2c39dc836091332bb93957a6d12e3_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      5fd2c39dc836091332bb93957a6d12e3

    • SHA1

      95c48fd986ac45bb9e4712a73e04f366163f7a84

    • SHA256

      b04a91f2498165cace9785ac6483e03a3af5a507322eab4238e69f3a2aeff54e

    • SHA512

      c750e3545b22b9bfb796c101b05d30840cca6845cd2006a48a336767b0a4beb3cb3b54c95deed0df2d58716e2db0a0b891a8ae102d6f089cd22994392cc9faaf

    • SSDEEP

      49152:lX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qq:llRsZ47/QXoHUOfAoj1x6q

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks