Resubmissions
03-07-2024 17:12
240703-vq9qas1fle 10Behavioral task
behavioral1
Sample
09a79e5e20fa4f5aae610c8ce3fe954029a91972b56c6576035ff7e0ec4c1d14.zip
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
09a79e5e20fa4f5aae610c8ce3fe954029a91972b56c6576035ff7e0ec4c1d14.zip
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
09a79e5e20fa4f5aae610c8ce3fe954029a91972b56c6576035ff7e0ec4c1d14.elf
Resource
ubuntu2204-amd64-20240611-en
General
-
Target
09a79e5e20fa4f5aae610c8ce3fe954029a91972b56c6576035ff7e0ec4c1d14.zip
-
Size
1.1MB
-
MD5
a805009756c29d18619a8ff80bd96b4e
-
SHA1
eeb1d705c1089746251559dbc2d49f86f65518d0
-
SHA256
37b302ee4b6db0c02196275ecbcdca4db3ecffbecafd43239b3c6df279864d95
-
SHA512
1bf3d54e5f3cc5dd5d5685be4a78c4e568e5ff70181d6e4fb4e05534e036dc92bc3aaf5d238efdf579205fe74e3233373a57932678eb41d8128b7fadbe1c9b97
-
SSDEEP
24576:PQiJTovxd3JQGkvcPQAX4ZMQNtKw7K3M0PV+TtkiLkmKaZUPPXuXCI/3GdtsdBEf:PQiAJQAPQ6I30PYTWbU6PP527s
Malware Config
Signatures
-
Detects Royal Ransomware payload 1 IoCs
Processes:
resource yara_rule static1/unpack001/09a79e5e20fa4f5aae610c8ce3fe954029a91972b56c6576035ff7e0ec4c1d14.elf royal_unix -
Royal_unix family
Files
-
09a79e5e20fa4f5aae610c8ce3fe954029a91972b56c6576035ff7e0ec4c1d14.zip.zip
Password: infected
-
09a79e5e20fa4f5aae610c8ce3fe954029a91972b56c6576035ff7e0ec4c1d14.elf.elf linux x64