General

  • Target

    2024-06-09_0d1f5fb40f6c33d8913ff8197e7a1db7_ryuk

  • Size

    7.2MB

  • MD5

    0d1f5fb40f6c33d8913ff8197e7a1db7

  • SHA1

    a3844e32c7518a4598f18c96ef6c91c5e5f20d18

  • SHA256

    138f4a5aae37d1a0190fb30914bd5d02741903c9ca0cbc987e1be781bd4e811b

  • SHA512

    650354cb3bcd12cf7145fca098dd2957130ed96e8152b7f59fc038d940f2a02c01ce5d53739713c1f79888529e0838ae112f7dc05d5e07df981d49c766c52a0d

  • SSDEEP

    196608:aaeIS5a9onJ5hrZERlyiU8AdZYJERbEOcrTOj2Sx6qqbH:NT9c5hlERJAdZYyKlrk2S

Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-09_0d1f5fb40f6c33d8913ff8197e7a1db7_ryuk
    .exe windows:5 windows x64 arch:x64

    b0d2bcfaf69e32f6189b93d5e3f439ad


    Headers

    Imports

    Sections

  • client-backdoor.pyc