General
-
Target
782788d736a6c603dbfb57f302e54e9050219e24dbde3c3b6f69484004d9415e
-
Size
170KB
-
Sample
220220-f9x4aaacar
-
MD5
32d91009c10608aa3fb20abea38af923
-
SHA1
c0af7c4c2acd9f76b8ff7206aed50b206a32ee26
-
SHA256
782788d736a6c603dbfb57f302e54e9050219e24dbde3c3b6f69484004d9415e
-
SHA512
9abe7527384cb8381b62ba4a476f28519859ed3c504183fb8cad2d0e34cd5328492864541cf3a2410daac018caf98cab92dc8f4fe6aa9435834ca9f0f8f18780
Static task
static1
Behavioral task
behavioral1
Sample
782788d736a6c603dbfb57f302e54e9050219e24dbde3c3b6f69484004d9415e.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
782788d736a6c603dbfb57f302e54e9050219e24dbde3c3b6f69484004d9415e.exe
Resource
win10v2004-en-20220113
Malware Config
Extracted
C:\RyukReadMe.txt
ryuk
14hVKm7Ft2rxDBFTNkkRC3kGstMGp2A4hk
Targets
-
-
Target
782788d736a6c603dbfb57f302e54e9050219e24dbde3c3b6f69484004d9415e
-
Size
170KB
-
MD5
32d91009c10608aa3fb20abea38af923
-
SHA1
c0af7c4c2acd9f76b8ff7206aed50b206a32ee26
-
SHA256
782788d736a6c603dbfb57f302e54e9050219e24dbde3c3b6f69484004d9415e
-
SHA512
9abe7527384cb8381b62ba4a476f28519859ed3c504183fb8cad2d0e34cd5328492864541cf3a2410daac018caf98cab92dc8f4fe6aa9435834ca9f0f8f18780
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-