General

  • Target

    2024-02-01_0a2726a4a306c94cb95b46b8b193997d_ryuk

  • Size

    924KB

  • MD5

    0a2726a4a306c94cb95b46b8b193997d

  • SHA1

    b7213d6795a1c7b083d1bd32f905914ca46c4d9f

  • SHA256

    5ba0081a88a2f33cb867fe19365cf9d16f67ebb3e34e5d1ebac380bd206e0c16

  • SHA512

    168274d6104be9a6ed87269be0d66b7a17659ef0e719d1215999a62578110dab9aaea64176afb07dee9a0935933bf9f5c7d59732330eee5c3450d470fcb0a59a

  • SSDEEP

    24576:5kBLmXMDZ7AaexJUYnkns8JnTrDbfnhRYcOTwKee6Yy:5kBKYZ7Aa8WW8RhzOToe6

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-01_0a2726a4a306c94cb95b46b8b193997d_ryuk
    .exe windows:6 windows x64 arch:x64

    91c272778494f545a220f3e427777252


    Headers

    Imports

    Sections