Overview

overview

10

Static

static

10

bad_rhy_mayb.exe

windows7-x64

10

bad_rhy_mayb.exe

windows10-2004-x64

10

Resubmissions

02-12-2024 10:27

241202-mg4hxswqbl 10

02-12-2024 10:25

241202-mgevka1jfx 10

02-12-2024 10:24

241202-mfqkns1jdy 10

23-06-2023 02:54

230623-dd7xhabd82 3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bad_rhy_mayb.exe

  • Size

    1.2MB

  • Sample

    241202-mg4hxswqbl

  • MD5

    59a9ca795b59161f767b94fc2dece71a

  • SHA1

    b07f6a5f61834a57304ad4d885bd37d8e1badba8

  • SHA256

    250e81eeb4df4649ccb13e271ae3f80d44995b2f8ffca7a2c5e1c738546c2ab1

  • SHA512

    ec59175002bd9c11c62e83aef2d1b99f883a0f71a151bee5ab1107d3f795b3e5cdd78f13348fd64eed563f6a5df5a0fef3977a8841f4ea4712ff1c2f7e18c222

  • SSDEEP

    24576:ztP7hdO1s6Skscec1SgnyN9HPFCCNhQI6GOfaFVIVrYwcMavbiZn3m75/J2:BLO1qkscec0gnyN9HPFCCNSI6GOfaFVc

Score
10/10
rhysidaexecutionransomware

Malware Config

Targets

    • Target

      bad_rhy_mayb.exe

    • Size

      1.2MB

    • MD5

      59a9ca795b59161f767b94fc2dece71a

    • SHA1

      b07f6a5f61834a57304ad4d885bd37d8e1badba8

    • SHA256

      250e81eeb4df4649ccb13e271ae3f80d44995b2f8ffca7a2c5e1c738546c2ab1

    • SHA512

      ec59175002bd9c11c62e83aef2d1b99f883a0f71a151bee5ab1107d3f795b3e5cdd78f13348fd64eed563f6a5df5a0fef3977a8841f4ea4712ff1c2f7e18c222

    • SSDEEP

      24576:ztP7hdO1s6Skscec1SgnyN9HPFCCNhQI6GOfaFVIVrYwcMavbiZn3m75/J2:BLO1qkscec0gnyN9HPFCCNSI6GOfaFVc

    Score
    10/10
    rhysidaransomwareexecution

    • Detect Rhysida ransomware

    • Rhysida

      Rhysida is a ransomware that is written in C++ and discovered in 2023.

      ransomwarerhysida

    • Rhysida family

      rhysida

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

      execution

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks