General

  • Target

    2024-03-27_af3ad31b2d0ebf78f873a4b73203e065_ryuk

  • Size

    16.2MB

  • MD5

    af3ad31b2d0ebf78f873a4b73203e065

  • SHA1

    b66c2e54dd92b1f6b52b38d28091ff0a8bf2464f

  • SHA256

    2346ad75858a00733df2e1ca5959f8aa2e5b05682e4b2dc0a48d67973a8cd2da

  • SHA512

    a6a99ca93f721278bcc4fee7e945aecb24ee9667a7583bdc76fbd4a9ba2f3f263bcf7611f63caee321e419885edda4ad873a5f901a213145ed06e2ac40403273

  • SSDEEP

    196608:UG91JGA7cW8aHXYEM6ZEgWDDr1IpVKCrkTMv:UG9jJ7cW53W6ZwDrcVKCrkTM

Score
10/10

Malware Config

Signatures

  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-27_af3ad31b2d0ebf78f873a4b73203e065_ryuk
    .exe windows:10 windows x64 arch:x64

    7c6e89d98d87b605fa1595d631d0db5d


    Headers

    Imports

    Exports

    Sections