General
-
Target
bbe7f26bcc02ee60e972c1b094be7944146a53f886b249b3f977a8f871a22510
-
Size
24KB
-
Sample
220402-xdm2wahdc6
-
MD5
0d9cdf4a04cbd4ad7d58d777f5cdd5cf
-
SHA1
3e4909844bfe19cd4a239052e3f4a043c915d269
-
SHA256
bbe7f26bcc02ee60e972c1b094be7944146a53f886b249b3f977a8f871a22510
-
SHA512
905cff6972682d02afad4c7decc680004f82ac1bdbef686a03414055dace8eaaf4a1c080af7afd8dffe61412046bdbf3e76cf77132a9afef5dfd47f6787e0e41
Static task
static1
Behavioral task
behavioral1
Sample
bbe7f26bcc02ee60e972c1b094be7944146a53f886b249b3f977a8f871a22510.exe
Resource
win7-20220331-en
Behavioral task
behavioral2
Sample
bbe7f26bcc02ee60e972c1b094be7944146a53f886b249b3f977a8f871a22510.exe
Resource
win10v2004-20220331-en
Malware Config
Extracted
C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\8E73FL5R\f[1].txt
ryuk
Targets
-
-
Target
bbe7f26bcc02ee60e972c1b094be7944146a53f886b249b3f977a8f871a22510
-
Size
24KB
-
MD5
0d9cdf4a04cbd4ad7d58d777f5cdd5cf
-
SHA1
3e4909844bfe19cd4a239052e3f4a043c915d269
-
SHA256
bbe7f26bcc02ee60e972c1b094be7944146a53f886b249b3f977a8f871a22510
-
SHA512
905cff6972682d02afad4c7decc680004f82ac1bdbef686a03414055dace8eaaf4a1c080af7afd8dffe61412046bdbf3e76cf77132a9afef5dfd47f6787e0e41
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-