General

  • Target

    2024-03-10_4729a9c806d9dac5f523ec78b9f60a0f_ryuk

  • Size

    11.8MB

  • MD5

    4729a9c806d9dac5f523ec78b9f60a0f

  • SHA1

    acb1a59c987fda8df9e651d856040df00b85ca90

  • SHA256

    ec91a1cd1be693e620ea88db5c815d85d92b2e70afb67b292ed4d0125d0d58df

  • SHA512

    403fe6bacf49c34c62a4b725a2fcd1d936c99304cb757d8be0cafe727adacd84f3be7779ddd2f3d3076b469687f44d44f27eec9b53e21b97dab98b849baf7319

  • SSDEEP

    98304:9MuyV9zTAZaCavg14uVD4QC4q4xXmz0RmjavxT1nnh19x8HZXeLAD40Qni2bLRAn:lM9zTAbCGHd30Qn7RsLT1ERGT

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-10_4729a9c806d9dac5f523ec78b9f60a0f_ryuk
    .exe windows:5 windows x64 arch:x64

    c6b4245ae224ede7ea8cbc47fd22f217


    Headers

    Imports

    Exports

    Sections