888baaafa1c37017f0a0cd0fc261a60c8c2b06e9b19a7dad4daa2a50a5be9bf6 | Triage

Submit
Reports

Overview

overview

Static

static

2024-06-05...uk.exe

windows7-x64

9

2024-06-05...uk.exe

windows10-2004-x64

9

Sharing

General

Target

2024-06-05_0a93c9f3983e554e76f81472f9033c00_ryuk
Size

2.1MB
Sample

240605-nhtksaeh76
MD5

0a93c9f3983e554e76f81472f9033c00
SHA1

07d7df19612b2aa875bd43307802304074689997
SHA256

888baaafa1c37017f0a0cd0fc261a60c8c2b06e9b19a7dad4daa2a50a5be9bf6
SHA512

5d0823959f366d49b7ce6c7e4290281cc95b75842dac812e418bafc4f80117704e2e336ebba6c1aac05a9f195015c1838d146cd68cf541323833f10c87c7d681
SSDEEP

49152:IAK+fs2HsrLzw7UrgCE0Hme0Dc2CuhtZ:IAK+fvHwzaCDanQ

Score

10^/10

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

2024-06-05_0a93c9f3983e554e76f81472f9033c00_ryuk.exe

Resource

win7-20240419-en

windows7-x64

5 signatures

150 seconds

Behavioral task

behavioral2

Sample

2024-06-05_0a93c9f3983e554e76f81472f9033c00_ryuk.exe

Resource

win10v2004-20240508-en

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  2024-06-05_0a93c9f3983e554e76f81472f9033c00_ryuk
- Size
  
  2.1MB
- MD5
  
  0a93c9f3983e554e76f81472f9033c00
- SHA1
  
  07d7df19612b2aa875bd43307802304074689997
- SHA256
  
  888baaafa1c37017f0a0cd0fc261a60c8c2b06e9b19a7dad4daa2a50a5be9bf6
- SHA512
  
  5d0823959f366d49b7ce6c7e4290281cc95b75842dac812e418bafc4f80117704e2e336ebba6c1aac05a9f195015c1838d146cd68cf541323833f10c87c7d681
- SSDEEP
  
  49152:IAK+fs2HsrLzw7UrgCE0Hme0Dc2CuhtZ:IAK+fvHwzaCDanQ
Score

9^/10
- Detects executables packed with Enigma
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

© 2018-2024

Terms | Privacy