General
-
Target
53430abd76a5cfcfada4962cd8925b2e32620c44a8863b445ba145f42dbfea64
-
Size
327KB
-
Sample
220124-frwshacde6
-
MD5
bded054d3176eefeedb4470df9ee4716
-
SHA1
27588165c1235dc41214195030d5620091d41261
-
SHA256
53430abd76a5cfcfada4962cd8925b2e32620c44a8863b445ba145f42dbfea64
-
SHA512
372195ea89bb3bf7aa4bf73253e86ee165ab7773440c1969a4297879f6e129ad66944c973a96f136b51a670b4347004bf6546b1c6259edf9ecd48c6874ce3907
Static task
static1
Behavioral task
behavioral1
Sample
53430abd76a5cfcfada4962cd8925b2e32620c44a8863b445ba145f42dbfea64.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
53430abd76a5cfcfada4962cd8925b2e32620c44a8863b445ba145f42dbfea64.exe
Resource
win10-en-20211208
Malware Config
Extracted
C:\RyukReadMe.txt
ryuk
1NQ42zc51stA4WAVkUK8uqFAjo1DbWv4Kz
Targets
-
-
Target
53430abd76a5cfcfada4962cd8925b2e32620c44a8863b445ba145f42dbfea64
-
Size
327KB
-
MD5
bded054d3176eefeedb4470df9ee4716
-
SHA1
27588165c1235dc41214195030d5620091d41261
-
SHA256
53430abd76a5cfcfada4962cd8925b2e32620c44a8863b445ba145f42dbfea64
-
SHA512
372195ea89bb3bf7aa4bf73253e86ee165ab7773440c1969a4297879f6e129ad66944c973a96f136b51a670b4347004bf6546b1c6259edf9ecd48c6874ce3907
Score10/10-
Executes dropped EXE
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-