Overview

overview

10

Static

static

10

2024-02-01...uk.exe

windows7-x64

1

2024-02-01...uk.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-01_aa8c51254a86704a409dfdb343a50ac8_ryuk

  • Size

    924KB

  • MD5

    aa8c51254a86704a409dfdb343a50ac8

  • SHA1

    5ad734493f892313e224c8ac2c791c8e21b73d94

  • SHA256

    97764f5ea1c3eb00502d276bdfcc123cc2d98005a8a26343f81a4273c905dc43

  • SHA512

    0ae06dfc6ac485e2356e254e1a76e7951eff8920e561dfbe27ee8c47d1ac4ad95e0c5deac3730e5dbc8527e87ed3b270047d14f82753162166326b12edc6ff6e

  • SSDEEP

    24576:CwtdrgOnBrcsAui46irM+tdztW9y27TwKee6Yy:nrrdBrSuidiMxToe6

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-01_aa8c51254a86704a409dfdb343a50ac8_ryuk
    .exe windows:6 windows x64 arch:x64

    91c272778494f545a220f3e427777252


    Headers

    Imports

    Sections