General

  • Target

    2024-03-07_896143e0fc4b351f2d7e39c0c39cde17_ryuk

  • Size

    41.2MB

  • MD5

    896143e0fc4b351f2d7e39c0c39cde17

  • SHA1

    4389f693d9766b1bafd67b30d29b98aebcbe1c10

  • SHA256

    5e5d4d8c63b9235f96f1a01e10a991f5052a1fddb6cc6f4a1c5f3402046fd302

  • SHA512

    736108a5c0fb25b5c7a7b9863f8ed96dd74454a2866848e51d0c78ffb4b7acecc6bc1954acdcf37858744cb3aa8cf3f27c00141e7b0ddf00bc9cfd3d2c997560

  • SSDEEP

    196608:EjcQr354SZDcXFvRI2NGNkG1UEsFhrWWItZwsg8DSt:pq35vAE2JBrWW0S8DS

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-07_896143e0fc4b351f2d7e39c0c39cde17_ryuk
    .exe windows:6 windows x64 arch:x64

    1bbb635b55f102dd3463b6ebab37e9ea


    Headers

    Imports

    Sections