General
-
Target
2024-04-15_df432101171c78c912ddd5ba26707cc2_ryuk
-
Size
4.3MB
-
Sample
240415-blw4vsdd5v
-
MD5
df432101171c78c912ddd5ba26707cc2
-
SHA1
1780cd288935787f87f0569e4f4d792e3933414c
-
SHA256
04d186d7189a0169524d7e980e03ea2ad6cca3f07c3cf9053963ef2451436732
-
SHA512
92d4398c8c09364f915e221f7523a4a20e9b2ab04b7ee2e7e52b8dfb0978f84cd133d88e77ea90f34ea03e5ce619812b7befd10f9c8080f06223b217fe2e3aac
-
SSDEEP
49152:tJ2NYoVYKmsB7UYzXQRPbyV1w1xXG+I/WGC/qmrwFzekI4RRFnFtZnNs4T3Bet2j:pATzgQVr+/GC/qAwDnL1x1PDtC
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-15_df432101171c78c912ddd5ba26707cc2_ryuk.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-15_df432101171c78c912ddd5ba26707cc2_ryuk.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
2024-04-15_df432101171c78c912ddd5ba26707cc2_ryuk
-
Size
4.3MB
-
MD5
df432101171c78c912ddd5ba26707cc2
-
SHA1
1780cd288935787f87f0569e4f4d792e3933414c
-
SHA256
04d186d7189a0169524d7e980e03ea2ad6cca3f07c3cf9053963ef2451436732
-
SHA512
92d4398c8c09364f915e221f7523a4a20e9b2ab04b7ee2e7e52b8dfb0978f84cd133d88e77ea90f34ea03e5ce619812b7befd10f9c8080f06223b217fe2e3aac
-
SSDEEP
49152:tJ2NYoVYKmsB7UYzXQRPbyV1w1xXG+I/WGC/qmrwFzekI4RRFnFtZnNs4T3Bet2j:pATzgQVr+/GC/qAwDnL1x1PDtC
Score9/10-
Detects executables calling ClearMyTracksByProcess
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-