Extracted

• • Target

    2024-04-27_75233849e58b39e9b843ec0ccf7a6073_ryuk

  • Size

    9.1MB

  • MD5

    75233849e58b39e9b843ec0ccf7a6073

  • SHA1

    3c4382bc51f2aa37ddd31b3f7bab02f81c616494

  • SHA256

    c57fa95d33419fb3751ed2df22ec74352e89152acf2c8ab9b7b242b256471e58

  • SHA512

    da630c38c8b2184555f561344c7d7abff9d88238c11c6e698b9ac3f7580cc85bf07a9537e2bc114b92a89032e869f2b69244cb995fe8bd739bbc91344207418e

  • SSDEEP

    196608:nFxqmN041cMczsdc/QDLb8frn06QKWB8Cosrx9WcgUi:Fk465yLbMQGenVgU

  Score

  10^/10

  metasploitbackdoortrojanupx

  • MetaSploit

    Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

    trojanbackdoormetasploit

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2