Overview

overview

10

Static

static

10

2024-06-08...uk.exe

windows7-x64

7

2024-06-08...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-06-08_5aae55cb202d5df6514e850cd64112bb_ryuk

  • Size

    5.8MB

  • MD5

    5aae55cb202d5df6514e850cd64112bb

  • SHA1

    6b6d2b499076a6dfd4dbd7747b7f9e88d7a4cb9e

  • SHA256

    a2423618a7931317c8ac0b360773c14e1c5465ee67c6fd2d563ae4fc0ce023b9

  • SHA512

    7a9f8c78e01364835955bfff909d4b7eae9f6acf89a6da63784434974cdb1279b8b2c91472a8974ee2ebe556eaa5fde55a8b7e153091059f3fb90e21c07b5a70

  • SSDEEP

    98304:jOjmPhc0qRXeRt7DHQktlw2KceThIPuFJt7zD9PMW8e9tvg05ITDGVbyXfu54vdw:jLhdQOz7D3tlKXFIuB/9PvN2DG1yPu67

Score
10/10
pyinstallermetasploit

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

124.71.199.146:6688

Signatures

  • Metasploit family
    metasploit
  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-08_5aae55cb202d5df6514e850cd64112bb_ryuk
    .exe windows:5 windows x64 arch:x64

    0822777feb8e7fd010d6791c4438bd5d


    Headers

    Imports

    Sections

  • av.pyc