General

  • Target

    2024-02-28_dd1bc75d87fb883f69b001a81ee71c99_ryuk

  • Size

    12.6MB

  • MD5

    dd1bc75d87fb883f69b001a81ee71c99

  • SHA1

    d3120eaa7154b6eb2044eb6f9ac1c3731e80fd89

  • SHA256

    c48e6262c9da9932c000b0706dab0970d0ff8672715a3599b0cb2a43ec28f9c7

  • SHA512

    7541769699f5623fafad49393cec44328ab831f755b994a0683239e3c091eb603d2ea8b41ef0ac12950f036bc22eb1f746eda0345f16ea185823e13b958fafb9

  • SSDEEP

    196608:dL48SiCGurDz5o/VP7TyT8xw3y0Kl2OCxnSM0c:dM78urDz5o/xT1wi0U2bH0c

Score
10/10

Malware Config

Signatures

  • Detects executables packed with Dotfuscator 1 IoCs
  • Detects executables packed with SmartAssembly 1 IoCs
  • Detects executables packed with Yano Obfuscator 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-28_dd1bc75d87fb883f69b001a81ee71c99_ryuk
    .exe windows:5 windows x64 arch:x64

    15b0d359b0d004363a1c9a125be29113


    Headers

    Imports

    Exports

    Sections