General
-
Target
6d768a860ccf91cc9cb4d127dd648d3b91d99e8c3467a8c45e5b0eb2a01acc3d
-
Size
170KB
-
Sample
220220-gthjbsaeaq
-
MD5
301b5d87092b4fc13dd4b05bff39ca9c
-
SHA1
4b8a77b3d993a0be86fe1d8aa4fdb8c15ae05ab9
-
SHA256
6d768a860ccf91cc9cb4d127dd648d3b91d99e8c3467a8c45e5b0eb2a01acc3d
-
SHA512
1c508c1ccf4f3bb0cd0d9dba2af02612f4528b6d056c84f50bed65de3448f0b191bae3db953973bc75881f0805b6c3655d75b24b8e2775d096ddd115f234bfac
Static task
static1
Behavioral task
behavioral1
Sample
6d768a860ccf91cc9cb4d127dd648d3b91d99e8c3467a8c45e5b0eb2a01acc3d.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
6d768a860ccf91cc9cb4d127dd648d3b91d99e8c3467a8c45e5b0eb2a01acc3d.exe
Resource
win10v2004-en-20220113
Malware Config
Extracted
C:\RyukReadMe.txt
ryuk
14hVKm7Ft2rxDBFTNkkRC3kGstMGp2A4hk
Targets
-
-
Target
6d768a860ccf91cc9cb4d127dd648d3b91d99e8c3467a8c45e5b0eb2a01acc3d
-
Size
170KB
-
MD5
301b5d87092b4fc13dd4b05bff39ca9c
-
SHA1
4b8a77b3d993a0be86fe1d8aa4fdb8c15ae05ab9
-
SHA256
6d768a860ccf91cc9cb4d127dd648d3b91d99e8c3467a8c45e5b0eb2a01acc3d
-
SHA512
1c508c1ccf4f3bb0cd0d9dba2af02612f4528b6d056c84f50bed65de3448f0b191bae3db953973bc75881f0805b6c3655d75b24b8e2775d096ddd115f234bfac
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-