General
- Target 2024-06-03_e90c601ef026eae7fd4a90cbea31c22f_ryuk
- Size 5.5MB
- Sample240603-qs383she23
- SHA256 83fdd201f38b7771ac10b0f4476433b9cce16a9a2a9a480e12dd8062218cdcf2
- MD5 e90c601ef026eae7fd4a90cbea31c22f
- SHA1 c317bb92ba40f2c1a3d7bf6d93ed008693593837
- SHA512 c1d7fc34f6d85e8c25087accedf1c6050d22b8ae6ae514b2a6ce29eab8845e5b123cbffdda1fdfdc4ae51a75b71f6de4d320f7446bf0d92db29100abf8be6ccf
- SSDEEP 49152:OEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfp:UAI5pAdVJn9tbnR1VgBVmGTjYvH
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2024-06-03_e90c601ef026eae7fd4a90cbea31c22f_ryuk.exe
Resource
win7-20240508-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-06-03_e90c601ef026eae7fd4a90cbea31c22f_ryuk
- Size 5.5MB
- SHA256 83fdd201f38b7771ac10b0f4476433b9cce16a9a2a9a480e12dd8062218cdcf2
- MD5 e90c601ef026eae7fd4a90cbea31c22f
- SHA1 c317bb92ba40f2c1a3d7bf6d93ed008693593837
- SHA512 c1d7fc34f6d85e8c25087accedf1c6050d22b8ae6ae514b2a6ce29eab8845e5b123cbffdda1fdfdc4ae51a75b71f6de4d320f7446bf0d92db29100abf8be6ccf
- SSDEEP 49152:OEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfp:UAI5pAdVJn9tbnR1VgBVmGTjYvH
- MD5 SHA1 SHA512 SSDEEP
Detects executables containing bas64 encoded gzip files
Executes dropped EXE
Drops file in System32 directory