Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-07_14b8eb9e110073c4c80be3808f56bd94_ryuk.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-07_14b8eb9e110073c4c80be3808f56bd94_ryuk.exe
Resource
win10v2004-20240419-en
Target
2024-05-07_14b8eb9e110073c4c80be3808f56bd94_ryuk
Size
4.2MB
MD5
14b8eb9e110073c4c80be3808f56bd94
SHA1
ae5d0bc81d150d068d0dc26300b431b6478b98fb
SHA256
7824eebc818b38c2568db8fab37697aa3dfc13b34334b46516f0ff3e2665b826
SHA512
f12a1f98fed28f4f92a5d49406d4ec136033fa8a518566152214a3b4b124bdfa90671dd42228f3f0c3ba78c05d9d61fa8a710cbbe1e93f6d3002609fe051c69f
SSDEEP
49152:OSz3TGwOmbZAA4fmsauLkKOpLkHF0cnxpnNbJj20R5qgBDdB3WGU8haLM5RdNvFs:17O0CXDrBDdB3WGU8iM5vN13zvzEjX7H
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
NetUserEnum
NetApiBufferFree
NetQueryDisplayInformation
MakeSureDirectoryPathExists
IsDebuggerPresent
GetStartupInfoW
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
LCMapStringW
GetStringTypeW
GetACP
ExitProcess
SetStdHandle
InitializeSListHead
UnhandledExceptionFilter
ExitThread
CreateThread
GetCommandLineA
VirtualAlloc
QueryPerformanceFrequency
FindFirstFileExW
GetConsoleCP
GetDriveTypeW
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetFileType
RtlUnwindEx
RtlPcToFileHeader
GetSystemTimeAsFileTime
QueryPerformanceCounter
WaitForSingleObjectEx
ResetEvent
IsProcessorFeaturePresent
HeapQueryInformation
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetProfileIntW
SearchPathW
FindResourceExW
GetCurrentDirectoryW
VerifyVersionInfoW
lstrcpyW
VerSetConditionMask
SetErrorMode
GetSystemDefaultUILanguage
CompareStringW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GlobalGetAtomNameW
GlobalFlags
WritePrivateProfileStringW
GetPrivateProfileIntW
ResumeThread
SuspendThread
SetThreadPriority
CreateEventW
SetEvent
GetFileTime
GetFileSizeEx
GetFileAttributesExW
InitializeCriticalSectionAndSpinCount
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FileTimeToLocalFileTime
GetThreadLocale
lstrcmpiW
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
GlobalSize
MulDiv
GlobalUnlock
GlobalLock
GlobalFindAtomW
GlobalAddAtomW
GlobalDeleteAtom
LoadLibraryExW
FreeResource
GetCurrentThreadId
EncodePointer
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
GetModuleHandleExW
GetModuleFileNameW
InitializeCriticalSection
OutputDebugStringA
LoadLibraryExA
VirtualQuery
VirtualProtect
GetSystemInfo
DeviceIoControl
CreateFileW
GetCommandLineW
ReleaseMutex
GetUserDefaultUILanguage
CreateMutexW
SetCurrentDirectoryW
GetProcessHeap
DecodePointer
RaiseException
HeapReAlloc
HeapSize
OpenProcess
lstrcmpW
GetExitCodeProcess
GetCurrentProcessId
ProcessIdToSessionId
lstrcpynA
lstrcmpA
lstrlenA
InitializeCriticalSectionEx
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetConsoleTextAttribute
SetLastError
GetPrivateProfileSectionNamesW
GetEnvironmentVariableW
Sleep
GetLocaleInfoW
GetPrivateProfileSectionW
HeapDestroy
HeapFree
HeapAlloc
HeapCreate
TerminateProcess
WaitForSingleObject
CreateProcessW
GetSystemDirectoryW
GetSystemTime
GetPrivateProfileStringW
GetTickCount
CreateDirectoryW
GetFileAttributesW
OutputDebugStringW
GetLocalTime
WriteConsoleW
GetConsoleScreenBufferInfo
GetStdHandle
AttachConsole
FreeConsole
GetModuleHandleW
GetLongPathNameW
CloseHandle
RemoveDirectoryW
LocalFree
FormatMessageW
GetCurrentProcess
GetLastError
GetCurrentThread
LoadLibraryW
MoveFileExW
GlobalFree
GlobalAlloc
GetVersionExW
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
WideCharToMultiByte
DeleteFileW
CopyFileW
GetTempFileNameW
GetTempPathW
GetWindowsDirectoryW
FindClose
FindNextFileW
FindFirstFileW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
FreeLibraryAndExitThread
GetCursorPos
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
DrawStateW
CharUpperW
RemoveMenu
InsertMenuW
GetMenuState
GetMenuStringW
ClientToScreen
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
IsDialogMessageW
IsWindowEnabled
CheckDlgButton
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
GetLastActivePopup
GetTopWindow
GetClassLongPtrW
SetWindowLongW
PtInRect
EqualRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowTextLengthW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
LoadMenuW
SendDlgItemMessageA
SetRectEmpty
FrameRect
PostThreadMessageW
GetIconInfo
EnableWindow
InvalidateRect
SendMessageW
GetFocus
GetSysColorBrush
GetSysColor
CopyRect
OffsetRect
FillRect
ExitWindowsEx
GetWindowRect
GetClientRect
MoveWindow
SetParent
wsprintfW
GetDesktopWindow
MessageBoxW
GetDlgItem
SetWindowTextW
EnumChildWindows
GetWindowTextW
LoadIconW
GetSystemMenu
AppendMenuW
IsIconic
GetSystemMetrics
DrawIcon
GetWindowLongPtrW
SetWindowLongPtrW
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
SetMenu
GetMenu
GetCapture
GetKeyState
SetFocus
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
ReleaseDC
GetDC
MapVirtualKeyW
GetKeyNameTextW
IsWindow
DestroyMenu
GetMenuItemInfoW
InflateRect
SystemParametersInfoW
GetMessageW
TranslateMessage
PostQuitMessage
SetWindowContextHelpId
MapDialogRect
ShowOwnedPopups
IntersectRect
RealChildWindowFromPoint
CopyImage
GetAsyncKeyState
SetLayeredWindowAttributes
EnumDisplayMonitors
TrackMouseEvent
wsprintfA
UnregisterClassW
GetParent
IsZoomed
SetCapture
ReleaseCapture
DeleteMenu
SetWindowRgn
MessageBeep
WindowFromPoint
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
SetMenuDefaultItem
IsRectEmpty
UpdateLayeredWindow
EnableScrollBar
UnionRect
MonitorFromPoint
DestroyIcon
LoadImageW
IsWindowVisible
SetCursor
LoadCursorW
GetWindowLongW
PostMessageW
MessageBoxA
SetTimer
KillTimer
LockWindowUpdate
EnumWindows
HideCaret
InvertRect
GetDoubleClickTime
IsCharLowerW
MapVirtualKeyExW
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsClipboardFormatAvailable
GetUpdateRect
GetClassNameW
GetWindowThreadProcessId
EnableMenuItem
SubtractRect
CreateMenu
DestroyCursor
GetComboBoxInfo
GetWindowRgn
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
TranslateAcceleratorW
ModifyMenuW
CharUpperBuffW
RegisterClipboardFormatW
EmptyClipboard
SetClipboardData
CloseClipboard
CopyIcon
OpenClipboard
SetClassLongPtrW
BringWindowToTop
SetCursorPos
DestroyAcceleratorTable
CreateAcceleratorTableW
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
DrawIconEx
DrawFocusRect
DrawFrameControl
DrawEdge
GetNextDlgGroupItem
SetRect
InvalidateRgn
CopyAcceleratorTableW
CharNextW
WaitMessage
RectVisible
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CopyMetaFileW
CreateDCW
CreateFontIndirectW
GetTextExtentPoint32W
CombineRgn
GetMapMode
SetRectRgn
DPtoLP
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
PtVisible
GetTextMetricsW
CreateRoundRectRgn
GetBkColor
GetTextColor
GetRgnBox
EnumFontFamiliesExW
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
RealizePalette
SetPixel
OffsetRgn
Rectangle
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
LPtoDP
RoundRect
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetWindowOrgEx
GetViewportOrgEx
SetPixelV
GetTextFaceW
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetDeviceCaps
GetClipBox
ExcludeClipRect
Escape
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
BitBlt
CreateBitmap
PatBlt
CreateRectRgnIndirect
GetStockObject
StretchBlt
CreateDIBSection
GetObjectW
CreateCompatibleDC
SetDIBColorTable
SelectObject
DeleteDC
RestoreDC
DeleteObject
SetTextColor
SetBkColor
GetTextCharsetInfo
SaveDC
TransparentBlt
AlphaBlend
EnumPrinterDriversW
DocumentPropertiesW
DeletePrinterConnectionW
DeletePrinterDriverExW
EnumPrintersA
GetPrinterDataExW
GetPrinterDataW
DeletePrinterDriverPackageW
XcvDataW
DeletePrinter
AddPrinterW
InstallPrinterDriverFromPackageW
UploadPrinterDriverPackageW
EnumPortsA
EnumJobsW
EnumPortsW
GetPrinterDriverW
GetPrinterW
SetPrinterDataExW
EnumPrinterDataExW
EnumPrinterKeyW
ClosePrinter
SetPrinterW
OpenPrinterW
EnumPrintersW
GetUserNameW
OpenProcessToken
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegQueryValueExA
ConvertSidToStringSidA
LookupAccountNameA
GetUserNameA
RegDeleteValueW
RegUnLoadKeyW
RegLoadKeyW
RegEnumKeyExW
RegDeleteKeyW
OpenThreadToken
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegRestoreKeyW
RegCloseKey
RegSaveKeyExW
RegCreateKeyExW
ConvertSidToStringSidW
LookupAccountNameW
CopySid
AdjustTokenPrivileges
LookupPrivilegeValueW
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
DragQueryFileW
SHFileOperationW
SHGetSpecialFolderPathW
SHGetFolderPathW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteExW
SHGetFileInfoW
SHGetDesktopFolder
ShellExecuteW
SHAppBarMessage
DragFinish
SHBrowseForFolderW
SHCreateDirectoryExW
ImageList_ReplaceIcon
InitCommonControlsEx
PathIsUNCW
PathRemoveFileSpecW
PathIsDirectoryW
PathFileExistsW
PathAppendW
PathAddBackslashW
PathFindExtensionW
PathStripToRootW
PathRemoveFileSpecA
PathAddBackslashA
PathAppendA
PathRenameExtensionW
PathRemoveExtensionW
PathAddExtensionW
PathFindFileNameW
StrFormatKBSizeW
PathStripPathW
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
GetWindowTheme
GetThemeSysColor
GetCurrentThemeName
GetThemeColor
DrawThemeParentBackground
DrawThemeText
IsAppThemed
DrawThemeBackground
CloseThemeData
OpenThemeData
OleIsCurrentClipboard
OleFlushClipboard
CoTaskMemAlloc
CoTaskMemFree
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
OleDuplicateData
ReleaseStgMedium
DoDragDrop
CoCreateGuid
CreateStreamOnHGlobal
CoFreeUnusedLibraries
OleInitialize
CLSIDFromString
CLSIDFromProgID
CoDisconnectObject
CoGetClassObject
CoUninitialize
CoInitialize
OleUninitialize
OleLockRunning
CoCreateInstance
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CoRevokeClassObject
CoRegisterMessageFilter
CoInitializeEx
VariantInit
VariantClear
VariantChangeType
SysFreeString
OleCreateFontIndirect
LoadTypeLi
VarBstrFromDate
VariantCopy
SysAllocStringLen
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocString
SysStringLen
OleUIBusyW
GdipCreateBitmapFromFile
GdipGetImagePaletteSize
GdipCreateBitmapFromHBITMAP
GdipGetImagePixelFormat
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCreateBitmapFromStream
GdipGetImageHeight
GdipCreateFromHDC
GdipGetImageWidth
GdipGetImagePalette
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateBitmapFromScan0
GdiplusShutdown
GdipCloneImage
GdipAlloc
GdipFree
GdipDisposeImage
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdiplusStartup
WTSQuerySessionInformationA
WTSFreeMemory
GetAdaptersInfo
GetAdaptersAddresses
RpcStringFreeW
UuidToStringW
UuidCreate
UnloadUserProfile
bind
ntohs
inet_ntoa
htonl
getservbyname
htons
WSAGetLastError
gethostbyname
WSASendTo
__WSAFDIsSet
WSAStringToAddressW
select
recvfrom
inet_addr
WSASetLastError
gethostbyaddr
WSAStartup
WSACleanup
WSASocketW
WSAAddressToStringW
setsockopt
closesocket
getservbyport
SnmpUtilOidNCmp
SnmpUtilOidFree
SnmpUtilMemAlloc
SnmpUtilVarBindFree
SnmpUtilVarBindListFree
SnmpUtilOidCpy
SnmpMgrOpen
SnmpMgrCtl
SnmpMgrClose
SnmpMgrStrToOid
SnmpMgrRequest
GetModuleFileNameExW
EnumProcessModules
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow
ImmGetOpenStatus
ImmGetContext
ImmReleaseContext
PlaySoundW
timeGetTime
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ