General
-
Target
2025-01-01_f4f6419b3b1db8b549660eccdd397be9_ryuk
-
Size
5.0MB
-
Sample
250101-h8pfvsylax
-
MD5
f4f6419b3b1db8b549660eccdd397be9
-
SHA1
a3e2f9e5e25d165ee2ccd2dc115c324a8dede139
-
SHA256
02a4709111b67da14020216103d7cec2aec3587234fd21914db6430c8cd81f65
-
SHA512
16e24df51b6a6ac4712282496c42255ac7ff165bd57b4e520a53af7935311928adc5c4ea7526a3819279840fed103317becf9ffa3989ba1e686a2f2f8d5192dd
-
SSDEEP
49152:FraFkK0lzGzoWFI7/U+9l3TIbh0f/NHqoW2qCQUVtnbcdeQhancG:lmk7lzeoWqg0fdsdecann
Static task
static1
Behavioral task
behavioral1
Sample
2025-01-01_f4f6419b3b1db8b549660eccdd397be9_ryuk.exe
Resource
win7-20240903-en
Malware Config
Extracted
bumblebee
933
-
dga
9qlg6ojje0fh.life
t120o0lqyzjk.life
etptzwxsyp32.life
r8odycmtgooa.life
nb56cfxd01nr.life
xyz5fpz6im57.life
y4yhop208nes.life
cvggxnytt623.life
7zaolm729xjw.life
fkgm8tb8fwky.life
rqyuhu82y5ro.life
rato5okc78nh.life
c1yp2qhm7efl.life
5vi9zf66i5rn.life
ydi1tars4qo5.life
l1bfvyx5yr8e.life
s5lxi812qbt5.life
37jnlxcobt19.life
1uwsarbntiak.life
x5mbn2n8j0wn.life
r3geabq7zf8o.life
lxsq535scirs.life
vuftqxjdst36.life
ks4bjt91jriw.life
zj9lg3qke1k5.life
0ndr4p83d77l.life
ykk98pvhd6jy.life
dlkim3cw0wt8.life
tliy48rr6fi7.life
xk9g4w9g1m0o.life
ulhida6od0xa.life
zvm00jz8j2i4.life
9f6e733z67jp.life
3ld9tlu84tq5.life
sg8yy8ayy3dh.life
v6h9bdel752b.life
d2mtygmipptj.life
0z5az6un9k6k.life
hvcds0it8dt7.life
iij8hlutxq94.life
v1w3127cwxhl.life
arownfz1c8o2.life
l1cr5uamgqz2.life
tner0hutwe3g.life
3s7pn3jol1sn.life
yg3ugy70v9rh.life
u4cvsoeaa55k.life
pys2nmc0yk2m.life
mt3jj0qpep3v.life
9mbxy8omj3af.life
3xphflcx0yq4.life
bme21emezt7p.life
g5l1d24n7poh.life
78s6ysrrqov9.life
49wkezslshdv.life
dvmwxxwjf199.life
lzqm2jeon3lj.life
4hi6mbnb5s0z.life
zecf73x7kezq.life
r3mvri2usb4r.life
y4n250nv3qub.life
77o38tif4ukq.life
f8zhsdf9xqr6.life
e55fg5b5c2yc.life
su3j9n5mdgme.life
uaakle2evth7.life
8ifj3b4lrq3l.life
7lv77j4spxno.life
747wloy5yoes.life
ac3r53i7d5xg.life
xuqu5zosjqcj.life
3btlsn8gcc15.life
a9hh0gszzfzd.life
z1wcdy9l9rim.life
ib9wv6nqehhx.life
8ekeu1gyn59t.life
b2agbvcra964.life
6zom9v75gq8h.life
j8qo2la38tog.life
cvh7gbxot24r.life
qpiw5n9vwsap.life
zz64pxhgxa44.life
hg3pmupul32p.life
4el3s31yx88p.life
nwv57uahqum9.life
slwtl6leeuc7.life
9so8csbbronu.life
33bxjuazvpki.life
gjl37cvm6xly.life
qyasdoxv9qa0.life
8q59sypdstid.life
mqpeq58cpr02.life
qf530mdf7ow6.life
f3bvx132ifi6.life
l7kzf2d26kug.life
soj8eqkhhz4x.life
rrvot3ihi002.life
wo5oxsnqywog.life
khf9pjkylz5h.life
5luyjjps2cmd.life
-
dga_seed
3171302928008992269
-
domain_length
12
-
num_dga_domains
300
-
port
443
Targets
-
-
Target
2025-01-01_f4f6419b3b1db8b549660eccdd397be9_ryuk
-
Size
5.0MB
-
MD5
f4f6419b3b1db8b549660eccdd397be9
-
SHA1
a3e2f9e5e25d165ee2ccd2dc115c324a8dede139
-
SHA256
02a4709111b67da14020216103d7cec2aec3587234fd21914db6430c8cd81f65
-
SHA512
16e24df51b6a6ac4712282496c42255ac7ff165bd57b4e520a53af7935311928adc5c4ea7526a3819279840fed103317becf9ffa3989ba1e686a2f2f8d5192dd
-
SSDEEP
49152:FraFkK0lzGzoWFI7/U+9l3TIbh0f/NHqoW2qCQUVtnbcdeQhancG:lmk7lzeoWqg0fdsdecann
-
Bumblebee family
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-