General

  • Target

    2024-04-22_a9b985a798e0f0c6a1b81fa69d421995_ryuk

  • Size

    12.6MB

  • MD5

    a9b985a798e0f0c6a1b81fa69d421995

  • SHA1

    675d1ed4f01f99423f854904a2532ef732297bfa

  • SHA256

    af36d64afab3322a351545e3a4c3fcfe819fe3abf1561278c3eda02848a8a2ba

  • SHA512

    c8e31fa6c6af82354afdcbcc9050d40b0134d2b91ac61d057bb10333f056e8205197d9af4d035c97f41ac9b732ec7638740c74672ca0841577e1cb240c0734de

  • SSDEEP

    196608:HLX8SiCGurDz5o/VP7TyT8xw3y0Kl2OCxnSDVV:Hr78urDz5o/xT1wi0U2be

Score
10/10

Malware Config

Signatures

  • Detects executables packed with Dotfuscator 1 IoCs
  • Detects executables packed with SmartAssembly 1 IoCs
  • Detects executables packed with Yano Obfuscator 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-22_a9b985a798e0f0c6a1b81fa69d421995_ryuk
    .exe windows:5 windows x64 arch:x64

    15b0d359b0d004363a1c9a125be29113


    Headers

    Imports

    Exports

    Sections