Analysis
-
max time kernel
142s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
14-08-2024 03:00
Behavioral task
behavioral1
Sample
Ryuk .Net Ransomware Builder.exe
Resource
win7-20240704-en
windows7-x64
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
Ryuk .Net Ransomware Builder.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
Ryuk .Net Ransomware Builder.exe
-
Size
287KB
-
MD5
b20d5ada2e81683bda32aa80cd71c025
-
SHA1
1ab3daa872761d887ef0be9ace528ee323201211
-
SHA256
0d8b4a07e91e02335f600332644e8f0e504f75ab19899a58b2c85ecb0887c738
-
SHA512
94da5ae4e43e6b0fdc8d0a83d8a3f2991a47b6e12f6781cc6aecb2d8d97a2d0da6dc456e3618c1a36697862e1a7a50b27a036b3569f33889452fe921c6981d91
-
SSDEEP
3072:GVgr8/vRx5cCPaEy3YxB+DV0Ugr8/vfx:GSrS/yKrS
Score
10/10
Malware Config
Signatures
-
Chaos
Ransomware family first seen in June 2021.
-
Chaos Ransomware 1 IoCs
resource yara_rule behavioral2/memory/736-0-0x00000000003D0000-0x000000000041E000-memory.dmp family_chaos