General

  • Target

    2024-05-22_c4d743a1c656fd500e49ef522b4222fe_ryuk

  • Size

    11.8MB

  • MD5

    c4d743a1c656fd500e49ef522b4222fe

  • SHA1

    cad2cce1cefd5e56d9a17f9e5f5fb3f05b4c2ebb

  • SHA256

    dd86da35e38dd1e8dccdb34ed9654b7b7753e7f77c82945ac088617a6ce2c950

  • SHA512

    d5a39eb047174c7a9d9d81971f3b8972eb8f460e9638356ddab2b401ebe9a1be91d13df37979b8cd6b84c1f251080386404899f4b8170c22875ae87d648ced02

  • SSDEEP

    98304:NMuyV9yUAZaCav/14mVK4QN4Y4+YjdD9IfvughO5dB+Xx8HZXeLRD40Qni2bLRAJ:1M9yUAbCLGNA0Qn7R/LT1ERGO

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-22_c4d743a1c656fd500e49ef522b4222fe_ryuk
    .exe windows:5 windows x64 arch:x64

    c6b4245ae224ede7ea8cbc47fd22f217


    Headers

    Imports

    Exports

    Sections