nw.exe.pdb
General
-
Target
2024-05-26_13084a07c254a58ca8740b4762ba505c_ryuk
-
Size
15.6MB
-
MD5
13084a07c254a58ca8740b4762ba505c
-
SHA1
b1b4688d8eee4a7f86a93c7617914ff89bfac225
-
SHA256
e98000076784654834a1afd5b90a71913aca72503a8e8fc9068c7e00d30ff1c7
-
SHA512
f1b2949c1175ef80039b569f130d90de7072e970a571822f641383cef0e5b18312c7201cf25d4d21a628027de79045bdf66803d7d5b52929a6ca9eb54fb77dbd
-
SSDEEP
49152:uMKeLJ95d90stngnOIoYcGfXZRcu+CsT1mTZ7BYyiy+3V9poO+yj8Igf36ilC5x/:G+sSuJR7BhiyQoO+cy+sSuJBM9p0p
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
Detects executables packed with Enigma 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-05-26_13084a07c254a58ca8740b4762ba505c_ryuk
Headers
Exports
Sections