Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2025-03-17...er.exe

windows7-x64

1

2025-03-17...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-17_fc247cc7cc6d355f630bfe84fd6dcd4b_coinminer_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    250317-tgj8lsxmt9

  • MD5

    fc247cc7cc6d355f630bfe84fd6dcd4b

  • SHA1

    8cc1ce1f061521a84b686950302674892e99dae9

  • SHA256

    1fcb33e584166fd8b917ea4ad415bc90cc8619cb88f9ca08bf7e2bdad2035bcd

  • SHA512

    27e263f8e70334d3e7234a15085631293c2726c607e6c2f0c99e74fc9025ad7fda97468ec31af639c2fd389111f4b973d76cfcd71d8e0c5fcfc4232058914665

  • SSDEEP

    49152:CX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QW:ClRsZ47/QXoHUOfAoj1x6W

Score
10/10
meshagenttacticalrmm

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

TacticalRMM

C2

http://meshcentral.uscomputers.com:443/agent.ashx

Attributes
  • mesh_id

    0x82144ACC72F2581DAE141DB1228278E94DBBF12A7CF6A662DC2BE0C928C226EBEB1071E2525B413EAA0872DF1B373B1F

  • server_id

    D3AC73F7D1141F9889D98E3C620F8BDFC75A23DB96F55E476C2157BF3F7DC2604D8BE2B89DED9586782CB291A21A5858

  • wss

    wss://meshcentral.uscomputers.com:443/agent.ashx

Targets

    • Target

      2025-03-17_fc247cc7cc6d355f630bfe84fd6dcd4b_coinminer_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      fc247cc7cc6d355f630bfe84fd6dcd4b

    • SHA1

      8cc1ce1f061521a84b686950302674892e99dae9

    • SHA256

      1fcb33e584166fd8b917ea4ad415bc90cc8619cb88f9ca08bf7e2bdad2035bcd

    • SHA512

      27e263f8e70334d3e7234a15085631293c2726c607e6c2f0c99e74fc9025ad7fda97468ec31af639c2fd389111f4b973d76cfcd71d8e0c5fcfc4232058914665

    • SSDEEP

      49152:CX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QW:ClRsZ47/QXoHUOfAoj1x6W

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks