General

  • Target

    2024-01-29_3485a8fa92172c209872f2dcbdede113_ryuk

  • Size

    12.6MB

  • MD5

    3485a8fa92172c209872f2dcbdede113

  • SHA1

    e10bd4ef16bcead8e6cfdfb81d368bbcc77a3806

  • SHA256

    5552757d155600fadee71b94b7aed211dc9aee0479f4eff79c4d2db6b048be00

  • SHA512

    ed86932bfd08f063614d7409d688d109aa95600192820ddb7cebc750ccea67e417d8f6364e6341fb347106e4526578886b030f9b5cebc307f1b13a3d157e23eb

  • SSDEEP

    196608:+LN8SiCGurDz5o/VP7TyT8xw3y0Kl2OCxnSjccJt:+R78urDz5o/xT1wi0U2beJt

Score
10/10

Malware Config

Signatures

  • Detects executables packed with Dotfuscator 1 IoCs
  • Detects executables packed with SmartAssembly 1 IoCs
  • Detects executables packed with Yano Obfuscator 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-29_3485a8fa92172c209872f2dcbdede113_ryuk
    .exe windows:5 windows x64 arch:x64

    15b0d359b0d004363a1c9a125be29113


    Headers

    Imports

    Exports

    Sections