General

  • Target

    2025-04-02_d15b76e7c90f8d3160456ce67e2f68ef_black-basta_coinminer_hijackloader_ryuk

  • Size

    3.3MB

  • Sample

    250402-2mx1naxqx3

  • MD5

    d15b76e7c90f8d3160456ce67e2f68ef

  • SHA1

    ea9c747b8c32193b2bc8ba0cacec87fd7cc8a4e1

  • SHA256

    b07725d4beadd557d273cba1ad1cd3db7393731eb26f949c932e644b4e3499ed

  • SHA512

    5429f4935e890b812415fbb0dccdc5b115c2d683dffc588c5bd923e678793c647a72f02beb0c5bd3cf096a8e4271b22c49dfe47fad8fd2b21afeed12109e4795

  • SSDEEP

    49152:dX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Q7:dlRsZ47/QXoHUOfAoj1x67

Score
10/10

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

NEW

C2

http://fksxs.com:443/agent.ashx

Attributes
  • mesh_id

    0xA841D6C40ABBF85499A62182DB32415AA5C736D2E181587DBBF3E9BF55269489403EE55CFF79C6D4153262EB4A5F64CB

  • server_id

    E95B8EA705702A9EA90C12873DAE76CC40727C6532619C8DAFDC6770F0721B91809B854CE28C8BA10E9DCDC3157FE07B

  • wss

    wss://fksxs.com:443/agent.ashx

Targets

    • Target

      2025-04-02_d15b76e7c90f8d3160456ce67e2f68ef_black-basta_coinminer_hijackloader_ryuk

    • Size

      3.3MB

    • MD5

      d15b76e7c90f8d3160456ce67e2f68ef

    • SHA1

      ea9c747b8c32193b2bc8ba0cacec87fd7cc8a4e1

    • SHA256

      b07725d4beadd557d273cba1ad1cd3db7393731eb26f949c932e644b4e3499ed

    • SHA512

      5429f4935e890b812415fbb0dccdc5b115c2d683dffc588c5bd923e678793c647a72f02beb0c5bd3cf096a8e4271b22c49dfe47fad8fd2b21afeed12109e4795

    • SSDEEP

      49152:dX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Q7:dlRsZ47/QXoHUOfAoj1x67

    Score
    1/10

MITRE ATT&CK Matrix

Tasks