General

  • Target

    2024-01-23_61978b20fcb5c0e38be0039ac9fe176a_ryuk

  • Size

    12.6MB

  • MD5

    61978b20fcb5c0e38be0039ac9fe176a

  • SHA1

    20038ac87ee0090ab2811d95348322e6944e9fc6

  • SHA256

    7a2434a7f6703bd202545ee62638fd06dd4e13fb2c0562832959c070238d70b3

  • SHA512

    1b9d1e471ba5109fe3302e2de3a7f7feed6e5dff27f293e36211c2c43cfb36547e62f1cd8848d8fcfd2d975880b8dc08bef84f0509b60c2e907046d77a34723b

  • SSDEEP

    196608:JLn8SiCGurDz5o/VP7TyT8xw3y0Kl2OCxnSEt:Jb78urDz5o/xT1wi0U2b

Score
10/10

Malware Config

Signatures

  • Detects executables packed with Dotfuscator 1 IoCs
  • Detects executables packed with SmartAssembly 1 IoCs
  • Detects executables packed with Yano Obfuscator 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-23_61978b20fcb5c0e38be0039ac9fe176a_ryuk
    .exe windows:5 windows x64 arch:x64

    15b0d359b0d004363a1c9a125be29113


    Headers

    Imports

    Exports

    Sections