General

  • Target

    2024-04-16_e2620a55e32fae4e12776179ef0e3aee_ryuk

  • Size

    2.3MB

  • MD5

    e2620a55e32fae4e12776179ef0e3aee

  • SHA1

    421d948ffecb425d8d34a6682aaf9da1d0005bb2

  • SHA256

    f7636eecff9a497bbe0d1d4c21930a2360dcab46e6af5a3422f518f242fcc999

  • SHA512

    99320aa1ef2daee1e1abf4dd399b4023bac5a6f185ad6c142e616ad650c5de50deaf435c33080ec37680e8f7afe41cc8dcfd48aca8df633664f11c39a9cd68d8

  • SSDEEP

    49152:Dz/Ic7snJ8se+MvEJFDlBDuFE1YaAGGYqzxzbzKWXRiz0Ewt3aOPqBr0cEWQhzaV:4sQJ8t5AD3Db1YRGGYqzxzbzKWXRiz0k

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-16_e2620a55e32fae4e12776179ef0e3aee_ryuk
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections