Overview

overview

10

Static

static

10

2025-03-01...er.exe

windows7-x64

1

2025-03-01...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-01_57cc09772e395a4f39c80eeb155cd3ac_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    250301-pqktaa1qy9

  • MD5

    57cc09772e395a4f39c80eeb155cd3ac

  • SHA1

    49ce2942f32bd92e14e081e8b1e6d60081604910

  • SHA256

    8532d5aa99e0721293515ea81af6a3a6e3ce630d3fa620d8123eaa8de5cda154

  • SHA512

    546ad63f9796be96a431d74a1a86b076f966f3255c3b90a81a621544a1cce83c16197a480639e4a513e96c7347c01ca7b86c63f8ac1ff9fe7ec982fe6b241087

  • SSDEEP

    49152:0X3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QD:0lRsZ47/QXoHUOfAoj1x6D

Score
10/10
meshagentssc-group

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

ssc-group

C2

http://10.0.0.229:443/agent.ashx

Attributes
  • mesh_id

    0x3A73E854F2D4C882C899FC7A58FA6820380014A45AE564E4D11EDBF8FD28E5A4E8FBA4D5101E3FEEF6D03F123AE69F81

  • server_id

    1C11BA1DB8AB86A9D441A47184D727A8F41AA2250AA8A9195CE53A00B31A67F82C812C1598169C8D4523765F26005993

  • wss

    wss://10.0.0.229:443/agent.ashx

Targets

    • Target

      2025-03-01_57cc09772e395a4f39c80eeb155cd3ac_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      57cc09772e395a4f39c80eeb155cd3ac

    • SHA1

      49ce2942f32bd92e14e081e8b1e6d60081604910

    • SHA256

      8532d5aa99e0721293515ea81af6a3a6e3ce630d3fa620d8123eaa8de5cda154

    • SHA512

      546ad63f9796be96a431d74a1a86b076f966f3255c3b90a81a621544a1cce83c16197a480639e4a513e96c7347c01ca7b86c63f8ac1ff9fe7ec982fe6b241087

    • SSDEEP

      49152:0X3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QD:0lRsZ47/QXoHUOfAoj1x6D

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks