General

  • Target

    2024-02-01_1c9cb8d11f57ebca8f831643e1fe8d2b_ryuk

  • Size

    924KB

  • MD5

    1c9cb8d11f57ebca8f831643e1fe8d2b

  • SHA1

    742d470725235eb7810bf6ea6a1aeb4dc2994fcd

  • SHA256

    b462313c6b84a5f125e3ff57f972303003692fa593c461bde01e7a2351242549

  • SHA512

    aacfee9e015b39d1f04861ff460b2f6e2e06892f63859465606f9cd398ac3fb14ef633ccb4fc03018920a8b2b67431ea51438e41daada69244a6f3508bd93406

  • SSDEEP

    24576:DXmbOqz9Q0naL9Ae/CeitRk1gIhYTwKee6Yy:DXmbbC0nahAe/Cei7klYToe6

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-01_1c9cb8d11f57ebca8f831643e1fe8d2b_ryuk
    .exe windows:6 windows x64 arch:x64

    91c272778494f545a220f3e427777252


    Headers

    Imports

    Sections