General
- Target 2024-06-08_5aae55cb202d5df6514e850cd64112bb_ryuk
- Size 5.8MB
- Sample240608-deacmagg87
- SHA256 a2423618a7931317c8ac0b360773c14e1c5465ee67c6fd2d563ae4fc0ce023b9
- MD5 5aae55cb202d5df6514e850cd64112bb
- SHA1 6b6d2b499076a6dfd4dbd7747b7f9e88d7a4cb9e
- SHA512 7a9f8c78e01364835955bfff909d4b7eae9f6acf89a6da63784434974cdb1279b8b2c91472a8974ee2ebe556eaa5fde55a8b7e153091059f3fb90e21c07b5a70
- SSDEEP 98304:jOjmPhc0qRXeRt7DHQktlw2KceThIPuFJt7zD9PMW8e9tvg05ITDGVbyXfu54vdw:jLhdQOz7D3tlKXFIuB/9PvN2DG1yPu67
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2024-06-08_5aae55cb202d5df6514e850cd64112bb_ryuk.exe
Resource
win7-20240419-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-08_5aae55cb202d5df6514e850cd64112bb_ryuk.exe
Resource
win10v2004-20240508-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
metasploit
Version
-
metasploit_stager
C2
-
124.71.199.146:6688
Targets
-
- Target 2024-06-08_5aae55cb202d5df6514e850cd64112bb_ryuk
- Size 5.8MB
- SHA256 a2423618a7931317c8ac0b360773c14e1c5465ee67c6fd2d563ae4fc0ce023b9
- MD5 5aae55cb202d5df6514e850cd64112bb
- SHA1 6b6d2b499076a6dfd4dbd7747b7f9e88d7a4cb9e
- SHA512 7a9f8c78e01364835955bfff909d4b7eae9f6acf89a6da63784434974cdb1279b8b2c91472a8974ee2ebe556eaa5fde55a8b7e153091059f3fb90e21c07b5a70
- SSDEEP 98304:jOjmPhc0qRXeRt7DHQktlw2KceThIPuFJt7zD9PMW8e9tvg05ITDGVbyXfu54vdw:jLhdQOz7D3tlKXFIuB/9PvN2DG1yPu67
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Loads dropped DLL