Overview

overview

10

Static

static

10

2024-01-26...uk.exe

windows7-x64

1

2024-01-26...uk.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-26_afba9aab576634a9fa3f3ce1a7f3c8f4_ryuk

  • Size

    924KB

  • MD5

    afba9aab576634a9fa3f3ce1a7f3c8f4

  • SHA1

    1d691374b69305528fbd83ab83bbcfabf5467f80

  • SHA256

    f2cf3b5409038de050a5b7af16e55019c138d0b872c70723a8a2462777a5e098

  • SHA512

    cb295d00bffb575209b42d68d9901edfc73fc8bec1d52e7c47a5d5f4a150855dbbc0049d22f7c388f982a2bdbbc91ee09a1c75e022c7b65dd7b07542d8f6bf06

  • SSDEEP

    12288:MfBImgBW1xp8vIn7pEkCu1qCNRYC7ysd+Yu7OPrsG32ERP+uBKiTwKee6YHS:eBImYACI2kCu6s243JZBTwKee6Yy

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

81.55.195.19:58316

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-26_afba9aab576634a9fa3f3ce1a7f3c8f4_ryuk
    .exe windows:6 windows x64 arch:x64

    91c272778494f545a220f3e427777252


    Headers

    Imports

    Sections