General

  • Target

    2025-04-07_c24ced4900d47b76d537d5968daa71e2_black-basta_coinminer_ryuk_sliver

  • Size

    3.3MB

  • Sample

    250407-sp9msstvgx

  • MD5

    c24ced4900d47b76d537d5968daa71e2

  • SHA1

    f63045e80a5e7bd666f97868d478b74eebe1dbc7

  • SHA256

    e44c92d73b88371b908615793da2fc523d46c1de704317cc997d6157338163ea

  • SHA512

    7378845d60ae5bdd1f5abff72108d364726da77a1dd13035adcfcaca2c0d8280add02e1ad22028f851c821f97a91b1888f3c7a8745712c8d430714c8c79a569a

  • SSDEEP

    49152:yX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQeD5b5:ylRsZ47/QXoHUOfAoj1O55

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

IDF - Biosynergie - Ordinateurs

C2

http://arthas.biogroup.network:443/agent.ashx

Attributes
  • mesh_id

    0x7A2CC7D7667A765EF627B0590DB7461B9D66344784065F2B9FE9BE0EA548713A8EFFC118030D85792E286F695CBD535E

  • server_id

    60FE607AC7B5C4A83F642D4F41F9149F153BEC2008C0EA803F0E9E147A43B8D095415898E2888F68BDCD1345D7FCF9AC

  • wss

    wss://arthas.biogroup.network:443/agent.ashx

Targets

    • Target

      2025-04-07_c24ced4900d47b76d537d5968daa71e2_black-basta_coinminer_ryuk_sliver

    • Size

      3.3MB

    • MD5

      c24ced4900d47b76d537d5968daa71e2

    • SHA1

      f63045e80a5e7bd666f97868d478b74eebe1dbc7

    • SHA256

      e44c92d73b88371b908615793da2fc523d46c1de704317cc997d6157338163ea

    • SHA512

      7378845d60ae5bdd1f5abff72108d364726da77a1dd13035adcfcaca2c0d8280add02e1ad22028f851c821f97a91b1888f3c7a8745712c8d430714c8c79a569a

    • SSDEEP

      49152:yX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQeD5b5:ylRsZ47/QXoHUOfAoj1O55

    Score
    1/10

MITRE ATT&CK Matrix

Tasks