Overview

overview

10

Static

static

10

2024-06-07...uk.exe

windows7-x64

10

2024-06-07...uk.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-07_aba52cf4f4381515a6cd70131b9401e6_ryuk

  • Size

    6.1MB

  • MD5

    aba52cf4f4381515a6cd70131b9401e6

  • SHA1

    9c309d6cb239ec7299a91a60b140ce6fa9faf93d

  • SHA256

    afef988a4c4a77ef663a682299c3fa787a64d779288f873565a85b96902aa782

  • SHA512

    01a91cbb2e5a2837ddbee78e48f7b408f0bbf344122caaea97d15282fac78c6600b24e69899d36c5db95f81bccfb00f8bf4470d8b7eb58b405640005dcb0f24d

  • SSDEEP

    196608:c68lSw79FIn2i3/drySvaNat+FhvfKR4:R8jFIn2eOK+fW

Score
10/10
pyinstallercobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.8.135:80/Lmm7

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MALCJS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-07_aba52cf4f4381515a6cd70131b9401e6_ryuk
    .exe windows:5 windows x64 arch:x64

    0822777feb8e7fd010d6791c4438bd5d


    Headers

    Imports

    Sections

  • a2.pyc