General

  • Target

    2024-05-24_d189df8e900d22ce5684349e87e58ec3_ryuk

  • Size

    140KB

  • MD5

    d189df8e900d22ce5684349e87e58ec3

  • SHA1

    e858208f99c9f1c04f47c0af7362944aa0c14826

  • SHA256

    007944c2ef2c2cecd6f1298588b6a592f5a85a19677ed1a99ecff955cecefb61

  • SHA512

    51be5317c846488d7788bf2f9891456e8e34610a79bc4d0c826d0faaa28faa717c6f0fb5dedf7190907a65ff4a3c52b9c40d704d8f8c99402aae9e1daa80bbb7

  • SSDEEP

    3072:egKsEF7Wf33SdvlRmhYHP+8Pt1OOxkE6:jBwK3SBDmhYlR6

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_d189df8e900d22ce5684349e87e58ec3_ryuk
    .exe windows:5 windows x86 arch:x86

    1d0b6b925df56e49ee2768263a3e72dc


    Headers

    Imports

    Sections