General

  • Target

    2025-06-04_84cf67b531f8e5c9ebacb5c037e3d8ac_black-basta_coinminer_ryuk_sliver

  • Size

    3.3MB

  • Sample

    250604-l59jeafq3w

  • MD5

    84cf67b531f8e5c9ebacb5c037e3d8ac

  • SHA1

    78cc1624332f8975d1099ff01827dfa303f6d252

  • SHA256

    1850ea2152df524fb2b6910e30487681500a239382b8afdc95d21a5f471a23ad

  • SHA512

    2a523fb763b91077fbfd90adde6ca95226bd42044565884b019289fccd21054a8bc28f7ef878534b4ff976ba79d03c2109ac52510f619e69cf787d284947b403

  • SSDEEP

    49152:cf708gNcR9l5NyQB7q1AlgraPgDLDVXI2RXgGfX2kMFvfAw6dZ7Nueuxg5A1:c+49lnyeG3D56gXm6Hq1

Score
10/10

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

kran_group

C2

http://meshcent.its.ufanet.ru:443/agent.ashx

Attributes
  • mesh_id

    0x8586C76894EA3446CDE8BFE65E6FF343B66A55CBFC82F138742D9F1E078B5DCB8C30A7A27600B68F7D29245C5E67A459

  • server_id

    92361DD62E17552490F9968C444EAF21618626EC916098B7A27028E3759BECFC00603247A5829F7E5F230D03F82213BF

  • wss

    wss://meshcent.its.ufanet.ru:443/agent.ashx

Targets

    • Target

      2025-06-04_84cf67b531f8e5c9ebacb5c037e3d8ac_black-basta_coinminer_ryuk_sliver

    • Size

      3.3MB

    • MD5

      84cf67b531f8e5c9ebacb5c037e3d8ac

    • SHA1

      78cc1624332f8975d1099ff01827dfa303f6d252

    • SHA256

      1850ea2152df524fb2b6910e30487681500a239382b8afdc95d21a5f471a23ad

    • SHA512

      2a523fb763b91077fbfd90adde6ca95226bd42044565884b019289fccd21054a8bc28f7ef878534b4ff976ba79d03c2109ac52510f619e69cf787d284947b403

    • SSDEEP

      49152:cf708gNcR9l5NyQB7q1AlgraPgDLDVXI2RXgGfX2kMFvfAw6dZ7Nueuxg5A1:c+49lnyeG3D56gXm6Hq1

    Score
    1/10

MITRE ATT&CK Matrix

Tasks