General

  • Target

    2024-03-11_a8efee0cd03cc8359c41f3a0ed12a350_ryuk

  • Size

    11.8MB

  • MD5

    a8efee0cd03cc8359c41f3a0ed12a350

  • SHA1

    596da9341b53e42401ce31cafc73cf4a1a0950c5

  • SHA256

    cf21048781c01281d98ce262bb67d7fc5dd6cb3017f8777ca54d53c3b8c3a298

  • SHA512

    bafc2439f12f110f08f503f04725c6d3e41bd1e3d3eb29dd134f317b8f5301be043ce3a6f651eadd998b3cca3ffb39811780c1ae5dace8e973ab43c2c3fa1c06

  • SSDEEP

    98304:9MuyV9z0AZaCavC14QV84QD4c4ANuTcxGzi3hz1HvB9lx8HZXeLoD40Qni2bLRA2:lM9z0AbCioN50Qn7RELT1ERGq

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-11_a8efee0cd03cc8359c41f3a0ed12a350_ryuk
    .exe windows:5 windows x64 arch:x64

    c6b4245ae224ede7ea8cbc47fd22f217


    Headers

    Imports

    Exports

    Sections