Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2025-03-11...er.exe

windows7-x64

1

2025-03-11...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-11_d2515dadb8f701b81107c293575321ac_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    250311-lh6t1ayny6

  • MD5

    d2515dadb8f701b81107c293575321ac

  • SHA1

    b4b7716be4de19791e55bd1f82e7c7c25501bf92

  • SHA256

    6a49a90745701f76bf8464282b070dc1ab57ea00db584a3abc473b85f71b2ee2

  • SHA512

    25f070dc260dd311c1e00bf6c0bbc03f1512630e58647ffa2443f15b0729aae66b9558cb8c173086a49604f2eb95174dce2850a26efb6caf603947472f96189b

  • SSDEEP

    49152:ldZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxw5bA:XHvfGfZvZj1/N/z/owJA

Score
10/10
meshagentmediensichtung

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

MEDIENSICHTUNG

C2

http://10.41.26.10:443/agent.ashx

Attributes
  • mesh_id

    0x060FCF9AB6D0E12B341AF168A14CE97555FCA04F3227DDE6390D5DDD8906E37CA9C2A507E58538836C5BAF1B4C7F012A

  • server_id

    A3909A6AEBBC7631658764C1B9A47FA5C511CB6EB32722A9D941543461A8E17F25F78AC370AAB4132FD7D7FDD2F47B95

  • wss

    wss://10.41.26.10:443/agent.ashx

Targets

    • Target

      2025-03-11_d2515dadb8f701b81107c293575321ac_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      d2515dadb8f701b81107c293575321ac

    • SHA1

      b4b7716be4de19791e55bd1f82e7c7c25501bf92

    • SHA256

      6a49a90745701f76bf8464282b070dc1ab57ea00db584a3abc473b85f71b2ee2

    • SHA512

      25f070dc260dd311c1e00bf6c0bbc03f1512630e58647ffa2443f15b0729aae66b9558cb8c173086a49604f2eb95174dce2850a26efb6caf603947472f96189b

    • SSDEEP

      49152:ldZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxw5bA:XHvfGfZvZj1/N/z/owJA

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks