Analysis
-
max time kernel
89s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system -
submitted
11-02-2024 17:01
Behavioral task
behavioral1
Sample
Ryuk-NET-Ransomware-Builder-1.0.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Ryuk-NET-Ransomware-Builder-1.0.exe
Resource
win10v2004-20231222-en
2 signatures
150 seconds
General
-
Target
Ryuk-NET-Ransomware-Builder-1.0.exe
-
Size
287KB
-
MD5
b20d5ada2e81683bda32aa80cd71c025
-
SHA1
1ab3daa872761d887ef0be9ace528ee323201211
-
SHA256
0d8b4a07e91e02335f600332644e8f0e504f75ab19899a58b2c85ecb0887c738
-
SHA512
94da5ae4e43e6b0fdc8d0a83d8a3f2991a47b6e12f6781cc6aecb2d8d97a2d0da6dc456e3618c1a36697862e1a7a50b27a036b3569f33889452fe921c6981d91
-
SSDEEP
3072:GVgr8/vRx5cCPaEy3YxB+DV0Ugr8/vfx:GSrS/yKrS
Score
10/10
Malware Config
Signatures
-
Chaos
Ransomware family first seen in June 2021.
-
Chaos Ransomware 1 IoCs
resource yara_rule behavioral2/memory/3716-0-0x0000000000540000-0x000000000058E000-memory.dmp family_chaos