Overview

overview

10

Static

static

10

2024-01-27...uk.exe

windows7-x64

1

2024-01-27...uk.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-01-27_63f55021a326535ee178c420338d0383_ryuk

  • Size

    924KB

  • MD5

    63f55021a326535ee178c420338d0383

  • SHA1

    067ca5f8578147aba8290e808df861c789e29d22

  • SHA256

    ca7ff20bf90832edc6a2a2a506bdeb0d3ccd71216c1f7618ef9cc9df00feb9d4

  • SHA512

    7623ce662716e523f96ba314b523050df912f6fe58c8d9516ef172ec582b4c3cc17da788de0ab29e0fe0bcb1e326e53334dd938effdc9c34503ac52d933590ab

  • SSDEEP

    24576:dLdm7ZG9dxCEpeLa5h1j9HZ6QMY6fWp8vTwKee6Yy:7m7ZGpCEpCK9HZRwW8Toe6

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

147.40.177.226:45037

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-27_63f55021a326535ee178c420338d0383_ryuk
    .exe windows:6 windows x64 arch:x64

    91c272778494f545a220f3e427777252


    Headers

    Imports

    Sections