nw.exe.pdb
General
-
Target
2024-06-03_bec8aba3cf4e03f345f5d730b43a219f_ryuk
-
Size
15.6MB
-
MD5
bec8aba3cf4e03f345f5d730b43a219f
-
SHA1
3ca805e8e8190b24414d15a89a5b456e8a0d48f3
-
SHA256
2004a5d40f7dc0fb65e304f2dffdeecaa06685ef3c842522a7d1157727cc3bad
-
SHA512
e70955235c0bfa6c8d8c18ed78f63f45bc5ac1a87fd25b122c86d60e9925e207d5ab09191e8357aeed861f110b328e50a6891e2cc974ff13310125ea85c52507
-
SSDEEP
49152:vMKeLJ95d90stngnOIoYcGfXZRcu+CsT1mTZTJYyiy+3V9pNO+yj8Igf36ilC5x/:3+sSuJRTJhiyQNO+cy+sSuJBM9p0p
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
Detects executables packed with Enigma 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2024-06-03_bec8aba3cf4e03f345f5d730b43a219f_ryuk
Headers
Exports
Sections