General

  • Target

    2024-08-06_572fb5882f580ed2cfe33bdec95b621d_ryuk

  • Size

    91KB

  • Sample

    240806-bbz3rsxhpf

  • MD5

    572fb5882f580ed2cfe33bdec95b621d

  • SHA1

    e080244c4279eacf111c2019cd06bd399ff5292f

  • SHA256

    421cee317b744b4f486cb631c2a0386532eebf569b1cffd5fbe8dfb3f680a9db

  • SHA512

    37f9563ff401bf9211ab24151582d1308f282d9eed298b423ec733d3bc3f63237569345732d09a6cc992fab72367d6e2e2104aa2c9107f239c680a308d9a9b4f

  • SSDEEP

    1536:6uRFSPMJQAS2K7+gZfkEgaIwgKG1sWVdc9dlDXnGa9VhR68x8:6uzSPwq7BFkErHRGHUl3t9VhRZ

Malware Config

Extracted

Family

metasploit

Version

metasploit_stager

C2

192.168.220.128:5555

Targets

    • Target

      2024-08-06_572fb5882f580ed2cfe33bdec95b621d_ryuk

    • Size

      91KB

    • MD5

      572fb5882f580ed2cfe33bdec95b621d

    • SHA1

      e080244c4279eacf111c2019cd06bd399ff5292f

    • SHA256

      421cee317b744b4f486cb631c2a0386532eebf569b1cffd5fbe8dfb3f680a9db

    • SHA512

      37f9563ff401bf9211ab24151582d1308f282d9eed298b423ec733d3bc3f63237569345732d09a6cc992fab72367d6e2e2104aa2c9107f239c680a308d9a9b4f

    • SSDEEP

      1536:6uRFSPMJQAS2K7+gZfkEgaIwgKG1sWVdc9dlDXnGa9VhR68x8:6uzSPwq7BFkErHRGHUl3t9VhRZ

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

MITRE ATT&CK Matrix

Tasks