Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20241023-en -
resource tags
arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system -
submitted
03/12/2024, 08:23
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2024-12-03_854a9b6f5229ca9623655c5af644afa7_ryuk.exe
Resource
win7-20241023-en
3 signatures
150 seconds
General
-
Target
2024-12-03_854a9b6f5229ca9623655c5af644afa7_ryuk.exe
-
Size
10.3MB
-
MD5
854a9b6f5229ca9623655c5af644afa7
-
SHA1
24403333b76134ecbb44747014b88c0b0be9831f
-
SHA256
7493e9d330c6cd309670880f694b55d835ad3d774e907786d6eb5ac08dba21aa
-
SHA512
11c3c3cd58c937967047e448847122abd24a7015d87e81923a5364f2f4e50610dae63a819fcc7812b01cae1e23e7d3b09852fc201edd4c0ba1e7d062c56aac4b
-
SSDEEP
196608:2X0lRFzyrh2OH0DuVBYcSEzZmbjOe+sIY7sk0nEG8MTLwQBItZqWHDp:Ec7YHqgZmbjO1NYwfr8MTLXsZPp
Malware Config
Signatures
-
Sliver RAT v2 5 IoCs
resource yara_rule behavioral1/memory/800-0-0x00000000024F0000-0x0000000002EE8000-memory.dmp SliverRAT_v2 behavioral1/memory/800-2-0x00000000024F0000-0x0000000002EE8000-memory.dmp SliverRAT_v2 behavioral1/memory/800-1-0x00000000024F0000-0x0000000002EE8000-memory.dmp SliverRAT_v2 behavioral1/memory/800-3-0x00000000024F0000-0x0000000002EE8000-memory.dmp SliverRAT_v2 behavioral1/memory/800-4-0x00000000024F0000-0x0000000002EE8000-memory.dmp SliverRAT_v2 -
Sliver family