Overview

overview

10

Static

static

10

2024-02-01...uk.exe

windows7-x64

1

2024-02-01...uk.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-02-01_c08613675d4976c81628d262b4c9d8cb_ryuk

  • Size

    924KB

  • MD5

    c08613675d4976c81628d262b4c9d8cb

  • SHA1

    9c5d0d92df51d557fbc391530b81ce833eaa290d

  • SHA256

    d818f32499d7f3ae6551c35f4e31e6378cb131b73655e654ffea1764a62d4f71

  • SHA512

    cc3e2503aaeaef7c458256285010e391699be04e63c97470c366f6ba2066b9b1dd8d28dddb3153033645e6b53945c58eccf2d5b4588b6fbb5400652d18dde573

  • SSDEEP

    24576:GMfSwIy2aLWvOGSiZAATZeJL6/as63bQrtTwKee6Yy:GMBofZAATZeJL6/p6eToe6

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/fnstenv_mov

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-01_c08613675d4976c81628d262b4c9d8cb_ryuk
    .exe windows:6 windows x64 arch:x64

    91c272778494f545a220f3e427777252


    Headers

    Imports

    Sections