Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2025-03-11...er.exe

windows7-x64

1

2025-03-11...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-11_3a07c2715d9e191759e7f6103925d35a_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    250311-lc7jcazsf1

  • MD5

    3a07c2715d9e191759e7f6103925d35a

  • SHA1

    b45d0d1de8ffd7156e8f141acae2faeb0b6a47a3

  • SHA256

    fd011cf773f66a2e4013589e528ab2805b7a62015de907eea4cfd19a8b50447a

  • SHA512

    c9a38355e5f907a70c591cfde61a60d569edc81f1ba005e9aee5450163e85d16fe06e6389f29a3ceef5b569fbf868ff50547db40be52c7678803418d4b1ce22c

  • SSDEEP

    49152:CX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qxx:ClRsZ47/QXoHUOfAoj1x6n

Score
10/10
meshagentinteractivenetworks intern

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

interactivenetworks intern

C2

http://meshcentral.interactivenetworks.de:443/agent.ashx

Attributes
  • mesh_id

    0x518BBCE4433F167B015795112D48BB559ADC9E0001636A3DFF7DD0C7892266F67BC4195A8856404081A9155690F778F6

  • server_id

    72384CEBFDB68736F910BDEFE15EEC0ECB501BF9F85B003DAAD9567AB54C33E61CF6E581CBA217F2EB9056FA527E71F3

  • wss

    wss://meshcentral.interactivenetworks.de:443/agent.ashx

Targets

    • Target

      2025-03-11_3a07c2715d9e191759e7f6103925d35a_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      3a07c2715d9e191759e7f6103925d35a

    • SHA1

      b45d0d1de8ffd7156e8f141acae2faeb0b6a47a3

    • SHA256

      fd011cf773f66a2e4013589e528ab2805b7a62015de907eea4cfd19a8b50447a

    • SHA512

      c9a38355e5f907a70c591cfde61a60d569edc81f1ba005e9aee5450163e85d16fe06e6389f29a3ceef5b569fbf868ff50547db40be52c7678803418d4b1ce22c

    • SSDEEP

      49152:CX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qxx:ClRsZ47/QXoHUOfAoj1x6n

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks