General

  • Target

    2024-04-07_aba18ddf7490e3c6bb95d8ebbc1d8fd1_ryuk

  • Size

    170KB

  • MD5

    aba18ddf7490e3c6bb95d8ebbc1d8fd1

  • SHA1

    965018fae5c6e43ef8bc1c5c550201e499cb15c0

  • SHA256

    916a76052e84693bf9f65457d67a4b31f0f1db8f89cfbcdf579743b9c52a1886

  • SHA512

    f4007aa617eb9cd6001c6b3fefb60afa352806370ced4bb09921e257299cbdbc0cd551e19396786b3676395a7e08e53ba1c68b7f98ed56f8f97e5f2b7a5da1f9

  • SSDEEP

    3072:2HeriftL/WSo1vDb53j/8WGUzaqVh4LI8zQpn8:2+rA/WSo1rl3ALrlHQpn8

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-07_aba18ddf7490e3c6bb95d8ebbc1d8fd1_ryuk
    .exe windows:5 windows x64 arch:x64

    21de032c4f956048aee1e04ac102bfbd


    Headers

    Imports

    Sections