General

  • Target

    2024-01-25_f8ad48033256efa44135668b3cfa0bf0_ryuk

  • Size

    12.6MB

  • MD5

    f8ad48033256efa44135668b3cfa0bf0

  • SHA1

    feab844df98f98a784f1f704fe833cbdc0eb6265

  • SHA256

    96b9505669cff165254b24d17ec3c78e09a3baa8083b7662f55ef44cd7a5cf2b

  • SHA512

    5f4374559e233447ae1645984b4de5bb74b3c46b364e3a978f1fd4a5f83536691639a4eaa89f645992a657ff2c3666eeb36bb29f8216710f0c0bb97fc82b8bac

  • SSDEEP

    196608:4Ln8SiCGurDz5o/VP7TyT8xw3y0Kl2OCxnSrVQBWG:4b78urDz5o/xT1wi0U2bZB

Score
10/10

Malware Config

Signatures

  • Detects executables packed with Dotfuscator 1 IoCs
  • Detects executables packed with SmartAssembly 1 IoCs
  • Detects executables packed with Yano Obfuscator 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-25_f8ad48033256efa44135668b3cfa0bf0_ryuk
    .exe windows:5 windows x64 arch:x64

    15b0d359b0d004363a1c9a125be29113


    Headers

    Imports

    Exports

    Sections