Overview

overview

10

Static

static

7faeb64c50...ed.exe

windows7_x64

7faeb64c50...ed.exe

windows10_x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7faeb64c50cd15d036ca259a047d6c62ed491fff3729433fefba0b02c059d5ed.zip

  • Size

    140KB

  • Sample

    210809-es78m8evpe

  • MD5

    872978ff81425a927ef0ca5b76b2eca7

  • SHA1

    80ad8318fbe49953a9650a4138ab85390d572a38

  • SHA256

    907503b17094e4849d3f2b17f132c745e4a39c4c1b55c08b3e1d381c70c381d2

  • SHA512

    c96d7a5c4bd2823808fb52517ac520d70b886626da40c62ca47082da22f57ec9f665289c60900cbb7023710751c9149143575dfb42033bafdd0ceb5069b05488

Score
10/10
ryukdiscoveryransomware

Malware Config

Extracted

Path

C:\users\Public\RyukReadMe.html

Family

ryuk

Ransom Note
contact balance of shadow universe Ryuk $password = 'lRwc4TXe'; $torlink = 'http://lgjpuim5fe3pejmllygcffape3djui6k2a5pcbpuyvps3h4ajb7yf4id.onion'; function info(){alert("INSTRUCTION:\r\n1. Download tor browser.\r\n2. Open link through tor browser: " + $torlink + "\r\n3. Fill the form, your password: "+ $password +"\r\nWe will contact you shortly.\r\nAlways send files for test decryption.");};
URLs

http://lgjpuim5fe3pejmllygcffape3djui6k2a5pcbpuyvps3h4ajb7yf4id.onion

Targets

    • Target

      7faeb64c50cd15d036ca259a047d6c62ed491fff3729433fefba0b02c059d5ed.exe

    • Size

      273KB

    • MD5

      0eed6a270c65ab473f149b8b13c46c68

    • SHA1

      bffb380ef3952770464823d55d0f4dfa6ab0b8df

    • SHA256

      7faeb64c50cd15d036ca259a047d6c62ed491fff3729433fefba0b02c059d5ed

    • SHA512

      1edc5af819e0a604bef31bca55efeea4d50f089aa6bdd67afee00a10132b00172a82cda214ea0ca8164b8d7444d648984c27c45f27acc69e227188ec25064aff

    Score
    10/10
    ryukdiscoveryransomware

    • Ryuk

      Ransomware distributed via existing botnets, often Trickbot or Emotet.

      ransomwareryuk

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies file permissions

      discovery

    • Drops desktop.ini file(s)

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks