General

  • Target

    2024-05-24_8b7f2caff323b86543ac35238813e4f8_ryuk

  • Size

    170KB

  • MD5

    8b7f2caff323b86543ac35238813e4f8

  • SHA1

    bf763e8a75855038993f67795193199d6d0efaa3

  • SHA256

    981141e21dc48ecfd5051d6fc0b7fcd3bb31525f02c3b9ef1252436ddbe9aefa

  • SHA512

    f15c565a41a77f7b4c1bae9d016538aea11716bfaffeca31083f90a0eb26560c1711b95877585616f491cab42743e4c75698dd86026f739ee2cc41e49fb7c895

  • SSDEEP

    3072:wqeriftL/WSo1vDb53j/8WGcjU2nVhWLI8iID:wtrA/WSo1rl3AL3eID

Score
10/10

Malware Config

Signatures

  • Detects command variations typically used by ransomware 1 IoCs
  • Detects executables containing many references to VEEAM. Observed in ransomware 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_8b7f2caff323b86543ac35238813e4f8_ryuk
    .exe windows:5 windows x64 arch:x64

    21de032c4f956048aee1e04ac102bfbd


    Headers

    Imports

    Sections