Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2025-03-11...er.exe

windows7-x64

1

2025-03-11...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-11_b4bd7ac7726ee013e38354ebb00997e8_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    250311-lf232aynv4

  • MD5

    b4bd7ac7726ee013e38354ebb00997e8

  • SHA1

    2e5cb6d7caf28a51d0d9dd18b9aba4379187ac6b

  • SHA256

    f9cb38beb9f2c03874c0783a378419d72b4cfe1a2384f31cf1333e41bcd18bd5

  • SHA512

    39df85fd13548d0ee29b07d8e31df642abc7a9c8675b1e99ad541c37063cb95e2ef92de01d9ebaf4f56c156407845625b1a8f34113f593e2221b35ef568aafb3

  • SSDEEP

    49152:NX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QE:NlRsZ47/QXoHUOfAoj1x6E

Score
10/10
meshagenttest

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

test

C2

http://mesh.tcstch912.ddns.net:443/agent.ashx

Attributes
  • mesh_id

    0x6B7E2F2684EE09A6C771FCB19B24D5EAB1460DD92F29C8E855869B1A8FA343820F86FF1478CB0B4B7547E7F90E50DD2B

  • server_id

    D9E263836C0941DCC4A13485FE567910D4350BB3FD054334BE3F7C7BB9E9DF7EF4CFAF1067FBA3D618CD3B113DBCD404

  • wss

    wss://mesh.tcstch912.ddns.net:443/agent.ashx

Targets

    • Target

      2025-03-11_b4bd7ac7726ee013e38354ebb00997e8_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      b4bd7ac7726ee013e38354ebb00997e8

    • SHA1

      2e5cb6d7caf28a51d0d9dd18b9aba4379187ac6b

    • SHA256

      f9cb38beb9f2c03874c0783a378419d72b4cfe1a2384f31cf1333e41bcd18bd5

    • SHA512

      39df85fd13548d0ee29b07d8e31df642abc7a9c8675b1e99ad541c37063cb95e2ef92de01d9ebaf4f56c156407845625b1a8f34113f593e2221b35ef568aafb3

    • SSDEEP

      49152:NX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QE:NlRsZ47/QXoHUOfAoj1x6E

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks