General

  • Target

    2024-04-30_7dbfe7a5fe9ab33568039f755a35c4f8_ryuk_zxxz

  • Size

    27.5MB

  • MD5

    7dbfe7a5fe9ab33568039f755a35c4f8

  • SHA1

    a67aa48ff607a6f900415ea00eb76aca6ed89e44

  • SHA256

    97054a865251af4fcccf67e018f036409a1dfe04e817874fecd8a90158a7d1ae

  • SHA512

    ead9fd53dc9b0bccb4685e567b06543ca8490f681859a41888b7b8ddb867ac66040ca25a20d7595c84c88489d31700e4248d901064204a3eeb0448ce951b4217

  • SSDEEP

    393216:4Ek/oqFJ0VhBBHIRLtKN5jowNJPWehgCzZXGUyAI2:4O7BJzZsAI2

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • Privateloader family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-30_7dbfe7a5fe9ab33568039f755a35c4f8_ryuk_zxxz
    .exe windows:5 windows x64 arch:x64

    472df7e3c7c1cf2585b5ea8f2e8c4e14


    Headers

    Imports

    Exports

    Sections