General
-
Target
8141f47a1ee8453ac01daacb16cab2d18b37a9045edc5f20c9019d4327576704
-
Size
378KB
-
Sample
220124-e2gkwsbhc5
-
MD5
1643b85e7f459c6ffe1e5ab9ebb53f93
-
SHA1
3e42d07d89ef8d66b9a60664a53cbe7ae423c11c
-
SHA256
8141f47a1ee8453ac01daacb16cab2d18b37a9045edc5f20c9019d4327576704
-
SHA512
95a9a58bb84007dd1d8e37e6bf8cb2736003cc456951bfdaeaa24bc8696f0cc53e98225176f7de76a053a032e0c9d9b25e3cef57a3c289b2b932ac610b23b3d5
Static task
static1
Behavioral task
behavioral1
Sample
8141f47a1ee8453ac01daacb16cab2d18b37a9045edc5f20c9019d4327576704.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
8141f47a1ee8453ac01daacb16cab2d18b37a9045edc5f20c9019d4327576704.exe
Resource
win10-en-20211208
Malware Config
Extracted
C:\RyukReadMe.txt
ryuk
1NQ42zc51stA4WAVkUK8uqFAjo1DbWv4Kz
Targets
-
-
Target
8141f47a1ee8453ac01daacb16cab2d18b37a9045edc5f20c9019d4327576704
-
Size
378KB
-
MD5
1643b85e7f459c6ffe1e5ab9ebb53f93
-
SHA1
3e42d07d89ef8d66b9a60664a53cbe7ae423c11c
-
SHA256
8141f47a1ee8453ac01daacb16cab2d18b37a9045edc5f20c9019d4327576704
-
SHA512
95a9a58bb84007dd1d8e37e6bf8cb2736003cc456951bfdaeaa24bc8696f0cc53e98225176f7de76a053a032e0c9d9b25e3cef57a3c289b2b932ac610b23b3d5
Score10/10-
Executes dropped EXE
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-