Overview

overview

10

Static

static

10

2024-02-01...uk.exe

windows7-x64

1

2024-02-01...uk.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-01_5a4ab761a407a087aacdbb1b59fefeba_ryuk

  • Size

    924KB

  • MD5

    5a4ab761a407a087aacdbb1b59fefeba

  • SHA1

    e6c26208304a7091faaf77b1d4f3a61a066e6513

  • SHA256

    93e1516a1f12587b8d1a89507c74e2945ed5bf68bbe1505d957990524231a42e

  • SHA512

    1f421c946095c499499996bf3a8c534dd146ac9534df79df43e2c8a3bf27a712609e58f09e6df8bc4cb5c03fc23fc231d7a94b93341c4940898595e1c79f4bdd

  • SSDEEP

    24576:s8oTk5qwWzEXYR8Jn9gpGguLzGntTwKee6Yy:sDT5wjIyJwlGz6tToe6

Score
10/10
metasploit

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

161.205.137.33:15874

Signatures

  • Metasploit family
    metasploit
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-01_5a4ab761a407a087aacdbb1b59fefeba_ryuk
    .exe windows:6 windows x64 arch:x64

    91c272778494f545a220f3e427777252


    Headers

    Imports

    Sections