General
-
Target
daossoft-rar-password-rescuer.exe
-
Size
3.2MB
-
Sample
210416-agzxf1q8ea
-
MD5
b11ebc222d8e3ef1d307edab1f9d6912
-
SHA1
8408ca9375858485cd310ff376936025dc69f043
-
SHA256
7bec8fd7702e2d5e6c9b1a28f1233447c530db81bdfc960130cff97381595a42
-
SHA512
d66908e5a52979571985e29cde71766c235b53aae2658822cda2e2cbd7439e7dee62f307a8cce5583a424d9995772fb046b8df15b3b0588d2fceb1ed46d5f904
Static task
static1
Behavioral task
behavioral1
Sample
daossoft-rar-password-rescuer.exe
Resource
win10v20210410
Malware Config
Extracted
C:\Program Files (x86)\Daossoft RAR Password Rescuer\DaossoftDictionary.txt
ryuk
Targets
-
-
Target
daossoft-rar-password-rescuer.exe
-
Size
3.2MB
-
MD5
b11ebc222d8e3ef1d307edab1f9d6912
-
SHA1
8408ca9375858485cd310ff376936025dc69f043
-
SHA256
7bec8fd7702e2d5e6c9b1a28f1233447c530db81bdfc960130cff97381595a42
-
SHA512
d66908e5a52979571985e29cde71766c235b53aae2658822cda2e2cbd7439e7dee62f307a8cce5583a424d9995772fb046b8df15b3b0588d2fceb1ed46d5f904
Score10/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-