Overview

overview

10

Static

static

10

2025-03-05...er.exe

windows7-x64

1

2025-03-05...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-05_a9b9cd44e27f8fef5676f59d6b5d1d87_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    250305-3sa9hssvhs

  • MD5

    a9b9cd44e27f8fef5676f59d6b5d1d87

  • SHA1

    ba3f506923ff22ad50974d49ac464edc9ed429a9

  • SHA256

    353040ed749489c18735e3fab212ce975e78cf02111e2b8e9129809983db776d

  • SHA512

    4fe1fbe8b167664cd34f5966628b9ac53ce538f0ae2c4bdbcdb4407cd54882094754a9192f8dcac9c340cea8e25c438b50a7726839246c424cadb7ccdf6a97f3

  • SSDEEP

    49152:uX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QF:ulRsZ47/QXoHUOfAoj1x6F

Score
10/10
meshagentdan's pcs

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

Dan's PCs

C2

http://mesh.laseracid.com:443/agent.ashx

Attributes
  • mesh_id

    0x665C9B075EFC46D265BD49CCE59CF590325862C3C6C7EDD60FFC5B7DACA03FDD154765FBB9BF2FA8853FB2A0115F3A4E

  • server_id

    4788960D16B8B17C1EABCA23263253B795B78EA7BD579A9B6CC3232EB67E90A8C6F9C83892C863178D8DC97E8714C1C6

  • wss

    wss://mesh.laseracid.com:443/agent.ashx

Targets

    • Target

      2025-03-05_a9b9cd44e27f8fef5676f59d6b5d1d87_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      a9b9cd44e27f8fef5676f59d6b5d1d87

    • SHA1

      ba3f506923ff22ad50974d49ac464edc9ed429a9

    • SHA256

      353040ed749489c18735e3fab212ce975e78cf02111e2b8e9129809983db776d

    • SHA512

      4fe1fbe8b167664cd34f5966628b9ac53ce538f0ae2c4bdbcdb4407cd54882094754a9192f8dcac9c340cea8e25c438b50a7726839246c424cadb7ccdf6a97f3

    • SSDEEP

      49152:uX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QF:ulRsZ47/QXoHUOfAoj1x6F

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks