General
-
Target
2024-02-01_f172fc6ee8f905c6c52673b8a6ee086f_ryuk
-
Size
30.1MB
-
Sample
240201-s9blhabbck
-
MD5
f172fc6ee8f905c6c52673b8a6ee086f
-
SHA1
56a36f14bd3c1cfc2eafb907bdc8d0ddbf901598
-
SHA256
bd66d94384f2b782e89501c53ce56944a538a592586ef58f2fd0e5e010b8656e
-
SHA512
248083460ab92b65eadb7f4fe95860257c096a643b99c5cd4133ba7aa51c2c07f763408c06936e100f367c9e5ab0b02a2c3656e84ede754b4d93a26d15d5cc90
-
SSDEEP
786432:iqnTQ2Z7kLBQB5Ebg0yB/YezOnzLKBaRY6YeS+Le:iaTn4QB5EE0yB/YezUpYeq
Static task
static1
Behavioral task
behavioral1
Sample
2024-02-01_f172fc6ee8f905c6c52673b8a6ee086f_ryuk.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2024-02-01_f172fc6ee8f905c6c52673b8a6ee086f_ryuk.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
2024-02-01_f172fc6ee8f905c6c52673b8a6ee086f_ryuk
-
Size
30.1MB
-
MD5
f172fc6ee8f905c6c52673b8a6ee086f
-
SHA1
56a36f14bd3c1cfc2eafb907bdc8d0ddbf901598
-
SHA256
bd66d94384f2b782e89501c53ce56944a538a592586ef58f2fd0e5e010b8656e
-
SHA512
248083460ab92b65eadb7f4fe95860257c096a643b99c5cd4133ba7aa51c2c07f763408c06936e100f367c9e5ab0b02a2c3656e84ede754b4d93a26d15d5cc90
-
SSDEEP
786432:iqnTQ2Z7kLBQB5Ebg0yB/YezOnzLKBaRY6YeS+Le:iaTn4QB5EE0yB/YezUpYeq
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-