Overview

overview

10

Static

static

10

2025-03-07...er.exe

windows7-x64

1

2025-03-07...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-07_1a0537fad06e1a47ed31cf5fafc17364_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    250307-lhhgeaxzdv

  • MD5

    1a0537fad06e1a47ed31cf5fafc17364

  • SHA1

    144c04da2238785bdedaaec55a772e1692be3594

  • SHA256

    6486e4399eeeb0258a4c9a04be1a4802de190a428ff90a092617cc0d8118b4df

  • SHA512

    fdbdeeccabcb45d3fedf2f51c686fa27c372ebdf307a1050127f0cd1087678624b4e845b737b0edfd5bc812c885ba1a513f819954cfc5f7c6c1eb927f27e2fc5

  • SSDEEP

    49152:nX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Q4:nlRsZ47/QXoHUOfAoj1x64

Score
10/10
meshagents220

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

s220

Attributes
  • mesh_id

    0xD890C5A3354A821B620C2868BA2414513C69ED21EE405374ACBA847C262F466FBEF9F245D556B2B23782284E65C72498

  • server_id

    14FDB6E7FA730C2B2C0D6CCBBCFC362E77AFD9EE9B63D37F36477B5AC8CD4B8E5A52EB8FBF671FA851CE84D5EDD87D02

  • wss

    localhost

Targets

    • Target

      2025-03-07_1a0537fad06e1a47ed31cf5fafc17364_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      1a0537fad06e1a47ed31cf5fafc17364

    • SHA1

      144c04da2238785bdedaaec55a772e1692be3594

    • SHA256

      6486e4399eeeb0258a4c9a04be1a4802de190a428ff90a092617cc0d8118b4df

    • SHA512

      fdbdeeccabcb45d3fedf2f51c686fa27c372ebdf307a1050127f0cd1087678624b4e845b737b0edfd5bc812c885ba1a513f819954cfc5f7c6c1eb927f27e2fc5

    • SSDEEP

      49152:nX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Q4:nlRsZ47/QXoHUOfAoj1x64

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks