General

  • Target

    2024-01-27_b881759244ae673f2d1018aee7173a16_ryuk

  • Size

    924KB

  • MD5

    b881759244ae673f2d1018aee7173a16

  • SHA1

    23e873be2c2f8c5880e2ccb4ecd452f86a8e5c96

  • SHA256

    2b0f6be37aa15e5e4566169e428b0cffb2af582392abf5a43c77e31a701f3bb9

  • SHA512

    76d7364609de16c60d8a068c92c487b8a1cf6a38b21cd75f2c9791db6938fe8531b91cf8d93a8030185803fcaaf73ad7024fd05a8b55c35a5a1cb5e80a842477

  • SSDEEP

    24576:PJIUqxUSoswhj2sVoYAxJoMyTHoTwKee6Yy:PJIUKBoj2sVoYKHyTHoToe6

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-27_b881759244ae673f2d1018aee7173a16_ryuk
    .exe windows:6 windows x64 arch:x64

    91c272778494f545a220f3e427777252


    Headers

    Imports

    Sections