General

  • Target

    2025-06-05_e4dcc9a8d1c22e67361c730a6cec1573_black-basta_coinminer_ryuk_sliver

  • Size

    3.3MB

  • Sample

    250605-l8t8wscq8x

  • MD5

    e4dcc9a8d1c22e67361c730a6cec1573

  • SHA1

    d5b7c2ba0db5f28076feae7ffaf554533b79203d

  • SHA256

    040bb3990c4a4893a1988d404c694b8e158234458a8be101b50d5ee66cf25a08

  • SHA512

    dddd341f3c414b91e8ee143cbffcebe47fdefa9c069aac28bb72780368a63765bd74a30248653e351fb15e95929d21c747083ebb8557c76a05690f683c8244e7

  • SSDEEP

    49152:UX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qx:UlRsZ47/QXoHUOfAoj1x6x

Malware Config

Extracted

Family

meshagent

Version

2

Botnet

FERNACOM - RMM

C2

http://mesh.fernacom.com:443/agent.ashx

Attributes
  • mesh_id

    0xBA05A591881C808406B7BCC4161D9293C6288CB73A2AFAB59E7FA25A4E842200A69BC41D82BE701049DE67566CD4D236

  • server_id

    D142FFDB35D695FD649690942052243E13C6FF4A97C70B8F187170C5DCD8FDE77A50B64AAA4F98A6E280F416F60F8165

  • wss

    wss://mesh.fernacom.com:443/agent.ashx

Targets

    • Target

      2025-06-05_e4dcc9a8d1c22e67361c730a6cec1573_black-basta_coinminer_ryuk_sliver

    • Size

      3.3MB

    • MD5

      e4dcc9a8d1c22e67361c730a6cec1573

    • SHA1

      d5b7c2ba0db5f28076feae7ffaf554533b79203d

    • SHA256

      040bb3990c4a4893a1988d404c694b8e158234458a8be101b50d5ee66cf25a08

    • SHA512

      dddd341f3c414b91e8ee143cbffcebe47fdefa9c069aac28bb72780368a63765bd74a30248653e351fb15e95929d21c747083ebb8557c76a05690f683c8244e7

    • SSDEEP

      49152:UX3YnLOQYsZfQ74C6SkgSbXP31+frjUYuHi7nT8poTMFvfuJ1kZ7NrjHQe85Qx:UlRsZ47/QXoHUOfAoj1x6x

    Score
    1/10

MITRE ATT&CK Matrix

Tasks