General
-
Target
62c8958fc79972b987a313db8c94d9db5d11a5178234bce328ebe56dce330152
-
Size
170KB
-
Sample
220220-hcksssafhl
-
MD5
0b7cd7bb98886561c8115f24b5bcd387
-
SHA1
77a36353a0998388e56e849f6c05e4d7ca8c81e7
-
SHA256
62c8958fc79972b987a313db8c94d9db5d11a5178234bce328ebe56dce330152
-
SHA512
3812e6817c2f651c3f0434972eb223474a902a019acccb6143fa495f4d4b7a4a768866da2bb53f4c071792ca6d4d2e500c4e9a910d61999f9d549f1a9bfb3366
Static task
static1
Behavioral task
behavioral1
Sample
62c8958fc79972b987a313db8c94d9db5d11a5178234bce328ebe56dce330152.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
62c8958fc79972b987a313db8c94d9db5d11a5178234bce328ebe56dce330152.exe
Resource
win10v2004-en-20220113
Malware Config
Extracted
C:\RyukReadMe.txt
ryuk
14hVKm7Ft2rxDBFTNkkRC3kGstMGp2A4hk
Targets
-
-
Target
62c8958fc79972b987a313db8c94d9db5d11a5178234bce328ebe56dce330152
-
Size
170KB
-
MD5
0b7cd7bb98886561c8115f24b5bcd387
-
SHA1
77a36353a0998388e56e849f6c05e4d7ca8c81e7
-
SHA256
62c8958fc79972b987a313db8c94d9db5d11a5178234bce328ebe56dce330152
-
SHA512
3812e6817c2f651c3f0434972eb223474a902a019acccb6143fa495f4d4b7a4a768866da2bb53f4c071792ca6d4d2e500c4e9a910d61999f9d549f1a9bfb3366
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-