Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2025-03-21...uk.exe

windows7-x64

1

2025-03-21...uk.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-21_c9b0d22388426ba85ef4b31fc867651b_coinminer_ismagent_ryuk

  • Size

    3.3MB

  • Sample

    250321-xdytdawsat

  • MD5

    c9b0d22388426ba85ef4b31fc867651b

  • SHA1

    08030b364d9ec26077c8695e2fbcc5ac2f804302

  • SHA256

    45868207dad022edc63d2ce31afa83754cdcbe42e4033d4b0f308960353440d0

  • SHA512

    354f1077bbb626388b32d57f680f0b449471e6dce2337630e755e47fd18ed737aac8e86cfba23be30a710cda31a532f8696c0bf6415d569e4e7d724d16675105

  • SSDEEP

    49152:5X3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Q3:5lRsZ47/QXoHUOfAoj1x63

Score
10/10
meshagenttacticalrmm

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

TacticalRMM

C2

http://mesh.nxpscr-mssp.in:443/agent.ashx

Attributes
  • mesh_id

    0xEE7449209B7E4EB40DE54573F5987E69FAB5C904E3F4D26D2289C5B1CB71850BE307489BEAA113A61B8DFD8B5684C020

  • server_id

    F8C09207A5F8ABE5EEFFA5B3F17234E29CE3B1EE43866D88D78D1A6C560646104A706C5C6D0D3F5B2F841A65983DD34A

  • wss

    wss://mesh.nxpscr-mssp.in:443/agent.ashx

Targets

    • Target

      2025-03-21_c9b0d22388426ba85ef4b31fc867651b_coinminer_ismagent_ryuk

    • Size

      3.3MB

    • MD5

      c9b0d22388426ba85ef4b31fc867651b

    • SHA1

      08030b364d9ec26077c8695e2fbcc5ac2f804302

    • SHA256

      45868207dad022edc63d2ce31afa83754cdcbe42e4033d4b0f308960353440d0

    • SHA512

      354f1077bbb626388b32d57f680f0b449471e6dce2337630e755e47fd18ed737aac8e86cfba23be30a710cda31a532f8696c0bf6415d569e4e7d724d16675105

    • SSDEEP

      49152:5X3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Q3:5lRsZ47/QXoHUOfAoj1x63

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks