General

  • Target

    2024-05-10_809471eac111b338b7c7a96d8ca7858e_ryuk

  • Size

    12.6MB

  • MD5

    809471eac111b338b7c7a96d8ca7858e

  • SHA1

    ea454daec7c7f7a97d4fbd72a3197ba012be6aea

  • SHA256

    9f60f70bf06b6cfe6f01850fe46632bf6064da23bc50fc0864ff2a4c84aa00ef

  • SHA512

    3247ed221991cd7e1122b267fedf169d4d21a76cf340fb1b67b5cbba8e6d0467fc4151e3cf64fe72a60981d724801d81fcc337430ee31a41b952478975658857

  • SSDEEP

    196608:2L48SiCGurDz5o/VP7TyT8xw3y0Kl2OCxnSr6J:2M78urDz5o/xT1wi0U2bi

Score
10/10

Malware Config

Signatures

  • Detects executables packed with Dotfuscator 1 IoCs
  • Detects executables packed with SmartAssembly 1 IoCs
  • Detects executables packed with Yano Obfuscator 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-10_809471eac111b338b7c7a96d8ca7858e_ryuk
    .exe windows:5 windows x64 arch:x64

    15b0d359b0d004363a1c9a125be29113


    Headers

    Imports

    Exports

    Sections