General
- Target 2024-03-31_100c9800e2965ea2362c8d9cf6ba33eb_ryuk
- Size 4.9MB
- Sample240331-f2rarsfa57
- SHA256 978b11eb0242d5d22561d050efd5e7d092437290b1df02874191813a45ab90a1
- MD5 100c9800e2965ea2362c8d9cf6ba33eb
- SHA1 37affc8a4b3718bcf65a34548a1e4d37f75eaa84
- SHA512 90eb7442bbfa913744a5ef92017e891bf556e47626063981cd634e5554880ace2787257e01027c68e98d6bc81c44fab7a2dfb67e4e1810c1ae054865ab12c601
- SSDEEP 98304:r96A0OLbuAxpn8BX5ZoZQZKC+Lqd/6nQ5BEUHTT0:Z6A0JqpnaX5m9C+LwaQPH
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2024-03-31_100c9800e2965ea2362c8d9cf6ba33eb_ryuk.exe
Resource
win7-20240221-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-03-31_100c9800e2965ea2362c8d9cf6ba33eb_ryuk.exe
Resource
win10v2004-20240226-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-03-31_100c9800e2965ea2362c8d9cf6ba33eb_ryuk
- Size 4.9MB
- SHA256 978b11eb0242d5d22561d050efd5e7d092437290b1df02874191813a45ab90a1
- MD5 100c9800e2965ea2362c8d9cf6ba33eb
- SHA1 37affc8a4b3718bcf65a34548a1e4d37f75eaa84
- SHA512 90eb7442bbfa913744a5ef92017e891bf556e47626063981cd634e5554880ace2787257e01027c68e98d6bc81c44fab7a2dfb67e4e1810c1ae054865ab12c601
- SSDEEP 98304:r96A0OLbuAxpn8BX5ZoZQZKC+Lqd/6nQ5BEUHTT0:Z6A0JqpnaX5m9C+LwaQPH
- MD5 SHA1 SHA512 SSDEEP
Score10/10Modifies firewall policy service
Deletes itself
Executes dropped EXE