General

  • Target

    2024-04-16_feaed197274549bf86e185953e02bccb_ryuk

  • Size

    143KB

  • MD5

    feaed197274549bf86e185953e02bccb

  • SHA1

    d810ce27403a362d11583776f0b4aeeb7eac5f0c

  • SHA256

    77d06152544c22934c5d03718f88eb4af7eecf40a701c7b239e2e2088a99e167

  • SHA512

    1afa14af7b0012923be501f280fca4b8e780a66fb1ad026af54634cbede9b3b7156262c1b5845ea87861ab39f44b4b7a546a3be56a0c3db004eaea8c54354837

  • SSDEEP

    3072:xeXdYg/jIWxuwTFg7u/enfyk+uA1DsFWVm7PFwV7PnrPJ:xeXr/sWxfqa/enX+x1ovATzJ

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-16_feaed197274549bf86e185953e02bccb_ryuk
    .exe windows:6 windows x64 arch:x64

    58214ea65426a0aad3366eff8cb078de


    Headers

    Imports

    Sections