General

  • Target

    2024-03-11_edacf8a9046bca266410bb2fef60d05a_ryuk

  • Size

    63.4MB

  • MD5

    edacf8a9046bca266410bb2fef60d05a

  • SHA1

    be90fbae70b4bab78b710b5c479c13a2a86897d9

  • SHA256

    4fe55e7f916b5a44e803916282bd6ee86b3c9455949a097a1235cd505f356452

  • SHA512

    47c7c77eeabcd55db599f338aa25cc7b461ebd17bf64a9e2a9a0857c13fc8a81f064eb035cb98499d6fd2eaf3e8b6223ec29d3221755c994b4caa9e3d53702fe

  • SSDEEP

    393216:5WqVcxTJmXmeL3/+8frjWt7EuDSRX1tnDkI7hTg:WJmXP+31DSDtnDkI7hTg

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-11_edacf8a9046bca266410bb2fef60d05a_ryuk
    .exe windows:6 windows x64 arch:x64

    45c869028500ff36c12b233199832e31


    Headers

    Imports

    Sections