General

  • Target

    2024-02-01_f7262dcaccf14ab6af58c60df8abb143_ryuk

  • Size

    924KB

  • MD5

    f7262dcaccf14ab6af58c60df8abb143

  • SHA1

    ffa3bfab8cc233bfce2146579a6758457fec8bdb

  • SHA256

    456a5dc4b4b0f2c438db37e59ffbe62edcf4f2383708e261ae0bccbc1c9118e7

  • SHA512

    8d4ca011f824686df4196d439bf1097c7c9ee886fae6f7a25a151f297bb6cdf32ad83853c3f1bfaf46be520b5c64ec9bb23725a9de94b5cdb98dbe16f9a998c8

  • SSDEEP

    24576:XruiEjLPoXdKj/EioGwi9cgAxTwKee6Yy:KwtKYGwCc3Toe6

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/shikata_ga_nai

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-01_f7262dcaccf14ab6af58c60df8abb143_ryuk
    .exe windows:6 windows x64 arch:x64

    91c272778494f545a220f3e427777252


    Headers

    Imports

    Sections