Overview

overview

10

Static

static

10

2025-03-06...uk.exe

windows7-x64

1

2025-03-06...uk.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-06_b05d8597ad3781be655aed0f612f583d_ismagent_ryuk

  • Size

    3.2MB

  • Sample

    250306-qsqb8azps8

  • MD5

    b05d8597ad3781be655aed0f612f583d

  • SHA1

    f0b31115757ac94e9330fb976c15b89c50fcca38

  • SHA256

    19ae0db129f1e49c4bbdd72bc67b7c3e370386d61e349fde8b046e7e2f642f36

  • SHA512

    906c81869d2555fc77b1af9151a3595349fda3776997d56beaeee1376b9aa106b15da5b00109947fc7b56fab1cbab655d1005c5c83e6cde1cab105b4d93562f6

  • SSDEEP

    49152:Y0yAXvucS6SnbZVlxyZH0XAaCx5OX9ZO/xtEfOfzMFvfDTtKjkVE+ubDw8litYOG:rvg6ClrBCjec+OfAK7DuYOQr

Score
10/10
meshagentbun mappers

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

Bun Mappers

C2

http://mesh.futurefoam.com:443/agent.ashx

Attributes
  • mesh_id

    0x5C64C634433E261FF05F94DFA777BD018DDCEC7C8EFBD2ED86832B71E5B3562A4A26D766A96409E92948F36F73964AE2

  • server_id

    DEE50F078CE52CDB050EE95F393F3E49DA29EA948B2BC4F7D9CE47D234459D79295E95236E884D8B06B71A3221099F0B

  • wss

    wss://mesh.futurefoam.com:443/agent.ashx

Targets

    • Target

      2025-03-06_b05d8597ad3781be655aed0f612f583d_ismagent_ryuk

    • Size

      3.2MB

    • MD5

      b05d8597ad3781be655aed0f612f583d

    • SHA1

      f0b31115757ac94e9330fb976c15b89c50fcca38

    • SHA256

      19ae0db129f1e49c4bbdd72bc67b7c3e370386d61e349fde8b046e7e2f642f36

    • SHA512

      906c81869d2555fc77b1af9151a3595349fda3776997d56beaeee1376b9aa106b15da5b00109947fc7b56fab1cbab655d1005c5c83e6cde1cab105b4d93562f6

    • SSDEEP

      49152:Y0yAXvucS6SnbZVlxyZH0XAaCx5OX9ZO/xtEfOfzMFvfDTtKjkVE+ubDw8litYOG:rvg6ClrBCjec+OfAK7DuYOQr

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks