General
-
Target
2024-04-27_787f674b0cd0057977b650f13d435753_ryuk
-
Size
4.6MB
-
Sample
240427-3f9xbaba28
-
MD5
787f674b0cd0057977b650f13d435753
-
SHA1
0554fadf0e34a48e456325bc4791c3e88da68b3f
-
SHA256
5641641d9764960166df58ba0c3e2b7fea707ce211f11e06b00e64c1f4851bfe
-
SHA512
0b903f11b0d56c484f17354743c90630723b11d4d2459bfed3e882fab46a803949c239586563968fc232e768f1257399e284db96c058ff937b1405c2923b7f33
-
SSDEEP
49152:MENv5eRGGISmTJTGcMOfoKYYnSld33f61sHi4/pCYuQfTX+5o7at4EhgRtet6TaC:dv64SwqcMEIiEdBCyRLXTE/kag
Static task
static1
Behavioral task
behavioral1
Sample
2024-04-27_787f674b0cd0057977b650f13d435753_ryuk.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-04-27_787f674b0cd0057977b650f13d435753_ryuk.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
2024-04-27_787f674b0cd0057977b650f13d435753_ryuk
-
Size
4.6MB
-
MD5
787f674b0cd0057977b650f13d435753
-
SHA1
0554fadf0e34a48e456325bc4791c3e88da68b3f
-
SHA256
5641641d9764960166df58ba0c3e2b7fea707ce211f11e06b00e64c1f4851bfe
-
SHA512
0b903f11b0d56c484f17354743c90630723b11d4d2459bfed3e882fab46a803949c239586563968fc232e768f1257399e284db96c058ff937b1405c2923b7f33
-
SSDEEP
49152:MENv5eRGGISmTJTGcMOfoKYYnSld33f61sHi4/pCYuQfTX+5o7at4EhgRtet6TaC:dv64SwqcMEIiEdBCyRLXTE/kag
Score10/10-
Modifies firewall policy service
-
Deletes itself
-
Executes dropped EXE
-