Overview

overview

10

Static

static

3

2024-11-03...uk.exe

windows7-x64

10

2024-11-03...uk.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-11-03_9671440cec6c56ead52f51445420d371_ryuk

  • Size

    3.9MB

  • Sample

    241103-hvq3jayckm

  • MD5

    9671440cec6c56ead52f51445420d371

  • SHA1

    16cfda02193133e14cc0b3f2e6184d88c1c61652

  • SHA256

    8c68b959c5f6e1361040ab68af8a556539ec9d29676c2664726cc6d151975d49

  • SHA512

    54d58f08ea3ea8f5418ed148a2de80401bbd4f33e74a7a12860d2fb9ce7a7aa1d6f37350ee1cc0aea1e81f318136517580721786ced4a16808c391c1cea3c6f1

  • SSDEEP

    98304:BZIVJ9FevZJq/DxPtyBQPnRNJe1B+XKZbFcsUCcnbHJK:BYnexA75iGRNJpNsmbHk

Score
10/10
metasploitbackdoorpyinstallertrojan

Malware Config

Extracted

Family

metasploit

Version

encoder/fnstenv_mov

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.232.72:4444

Targets

    • Target

      2024-11-03_9671440cec6c56ead52f51445420d371_ryuk

    • Size

      3.9MB

    • MD5

      9671440cec6c56ead52f51445420d371

    • SHA1

      16cfda02193133e14cc0b3f2e6184d88c1c61652

    • SHA256

      8c68b959c5f6e1361040ab68af8a556539ec9d29676c2664726cc6d151975d49

    • SHA512

      54d58f08ea3ea8f5418ed148a2de80401bbd4f33e74a7a12860d2fb9ce7a7aa1d6f37350ee1cc0aea1e81f318136517580721786ced4a16808c391c1cea3c6f1

    • SSDEEP

      98304:BZIVJ9FevZJq/DxPtyBQPnRNJe1B+XKZbFcsUCcnbHJK:BYnexA75iGRNJpNsmbHk

    Score
    10/10
    metasploitbackdoortrojan

    • MetaSploit

      Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.

      trojanbackdoormetasploit

    • Metasploit family

      metasploit

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks