General

  • Target

    2024-05-23_52f80195c9b3bb6580ccbf3e0c9dceb5_ryuk

  • Size

    140KB

  • MD5

    52f80195c9b3bb6580ccbf3e0c9dceb5

  • SHA1

    aa5d37412781ac1048f9523ab248e379bfc51bf0

  • SHA256

    6d704353a882fc4e759a46052ad8e8e43965ade3832bc6770301796eeca0ea7d

  • SHA512

    1f158554de8b1335e864588e94a9d7e439539bd89555d7cc589f73814a7b99dbfc52c4aeb622f3bda86f11378975ea2d85fe70d64e40475380e3cdb3a520c3cf

  • SSDEEP

    3072:egKsEF7Wf33SdvlRmhYHP+8Pt1OOxkQ6:jBwK3SBDmhYld6

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-23_52f80195c9b3bb6580ccbf3e0c9dceb5_ryuk
    .exe windows:5 windows x86 arch:x86

    1d0b6b925df56e49ee2768263a3e72dc


    Headers

    Imports

    Sections