Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2025-03-23...er.exe

windows7-x64

1

2025-03-23...er.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-23_6e2bf67c80867652d496bb5d8048c741_coinminer_ismagent_ryuk_sliver

  • Size

    3.3MB

  • Sample

    250323-gq63hsvqs9

  • MD5

    6e2bf67c80867652d496bb5d8048c741

  • SHA1

    7692878d142b860899b07448e52a3d958b803e22

  • SHA256

    203044b1723b5859d200c08a4cc3ef523082964387a78200810b825730668c55

  • SHA512

    d6095f50dce55a02a32f2c839ea2acb2e31c1f9defaa340ac2ef936f018ddac053787ffc82bb3737f96f19bb2176abb09459e6a7163e20641adda718ba560747

  • SSDEEP

    49152:tX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QA:tlRsZ47/QXoHUOfAoj1x6A

Score
10/10
meshagenttacticalrmm

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

TacticalRMM

C2

http://mesh.arcommit.com.au:443/agent.ashx

Attributes
  • mesh_id

    0x91316443B3455B8C2AE7F91D97B2244BCA24A5190EB8742556769D34D273AC50FCA006B477FDE9DD3C86995A7E32E105

  • server_id

    630193EB01E0A1C5309CDE3A84C26444F70E99C117FDD8A3044A7D820569394BF5EFDB70622E54FF72235BD0EF349EE2

  • wss

    wss://mesh.arcommit.com.au:443/agent.ashx

Targets

    • Target

      2025-03-23_6e2bf67c80867652d496bb5d8048c741_coinminer_ismagent_ryuk_sliver

    • Size

      3.3MB

    • MD5

      6e2bf67c80867652d496bb5d8048c741

    • SHA1

      7692878d142b860899b07448e52a3d958b803e22

    • SHA256

      203044b1723b5859d200c08a4cc3ef523082964387a78200810b825730668c55

    • SHA512

      d6095f50dce55a02a32f2c839ea2acb2e31c1f9defaa340ac2ef936f018ddac053787ffc82bb3737f96f19bb2176abb09459e6a7163e20641adda718ba560747

    • SSDEEP

      49152:tX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85QA:tlRsZ47/QXoHUOfAoj1x6A

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks