General
-
Target
2025-04-02_d15b76e7c90f8d3160456ce67e2f68ef_black-basta_coinminer_hijackloader_ryuk
-
Size
3.3MB
-
Sample
250402-2vz5zsxry5
-
MD5
d15b76e7c90f8d3160456ce67e2f68ef
-
SHA1
ea9c747b8c32193b2bc8ba0cacec87fd7cc8a4e1
-
SHA256
b07725d4beadd557d273cba1ad1cd3db7393731eb26f949c932e644b4e3499ed
-
SHA512
5429f4935e890b812415fbb0dccdc5b115c2d683dffc588c5bd923e678793c647a72f02beb0c5bd3cf096a8e4271b22c49dfe47fad8fd2b21afeed12109e4795
-
SSDEEP
49152:dX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Q7:dlRsZ47/QXoHUOfAoj1x67
Behavioral task
behavioral1
Sample
2025-04-02_d15b76e7c90f8d3160456ce67e2f68ef_black-basta_coinminer_hijackloader_ryuk.exe
Resource
win10v2004-20250314-en
Malware Config
Extracted
meshagent
2
NEW
http://fksxs.com:443/agent.ashx
-
mesh_id
0xA841D6C40ABBF85499A62182DB32415AA5C736D2E181587DBBF3E9BF55269489403EE55CFF79C6D4153262EB4A5F64CB
-
server_id
E95B8EA705702A9EA90C12873DAE76CC40727C6532619C8DAFDC6770F0721B91809B854CE28C8BA10E9DCDC3157FE07B
-
wss
wss://fksxs.com:443/agent.ashx
Targets
-
-
Target
2025-04-02_d15b76e7c90f8d3160456ce67e2f68ef_black-basta_coinminer_hijackloader_ryuk
-
Size
3.3MB
-
MD5
d15b76e7c90f8d3160456ce67e2f68ef
-
SHA1
ea9c747b8c32193b2bc8ba0cacec87fd7cc8a4e1
-
SHA256
b07725d4beadd557d273cba1ad1cd3db7393731eb26f949c932e644b4e3499ed
-
SHA512
5429f4935e890b812415fbb0dccdc5b115c2d683dffc588c5bd923e678793c647a72f02beb0c5bd3cf096a8e4271b22c49dfe47fad8fd2b21afeed12109e4795
-
SSDEEP
49152:dX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Q7:dlRsZ47/QXoHUOfAoj1x67
Score1/10 -