Overview

overview

10

Static

static

3

2025-03-06...uk.exe

windows7-x64

10

2025-03-06...uk.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-03-06_c32074c697181bb10785afb2251e3d97_ryuk

  • Size

    691KB

  • Sample

    250306-v11kdavjw3

  • MD5

    c32074c697181bb10785afb2251e3d97

  • SHA1

    1e35ab0f31510f19d84369f132ec417941f1d2a9

  • SHA256

    b80cf979042c47ac0faaefcdf4e92142aff6aaaf0286b67a9e0835138a3e7707

  • SHA512

    140667faba182b2207ac416b221aedd5f793e320a0f2ae9d0fd33586fa60bef270c602985fee0671ebbae5e9caaf45d2726cfd0d377e973c6c6d24bf4ca96a36

  • SSDEEP

    6144:aNrRsZd9uXuSZSs9egMz4Od/LLrnm3TP1U4sx09xJTtP7/F30EFKp/FgmX:aNrRfZSs9ezz/PwTP1Utq9MEUp/ymX

Score
10/10
azovpersistenceransomwarewiper

Malware Config

Targets

    • Target

      2025-03-06_c32074c697181bb10785afb2251e3d97_ryuk

    • Size

      691KB

    • MD5

      c32074c697181bb10785afb2251e3d97

    • SHA1

      1e35ab0f31510f19d84369f132ec417941f1d2a9

    • SHA256

      b80cf979042c47ac0faaefcdf4e92142aff6aaaf0286b67a9e0835138a3e7707

    • SHA512

      140667faba182b2207ac416b221aedd5f793e320a0f2ae9d0fd33586fa60bef270c602985fee0671ebbae5e9caaf45d2726cfd0d377e973c6c6d24bf4ca96a36

    • SSDEEP

      6144:aNrRsZd9uXuSZSs9egMz4Od/LLrnm3TP1U4sx09xJTtP7/F30EFKp/FgmX:aNrRfZSs9ezz/PwTP1Utq9MEUp/ymX

    Score
    10/10
    azovpersistenceransomwarewiper

    • Azov

      A wiper seeking only damage, first seen in 2022.

      ransomwarewiperazov

    • Azov family

      azov

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks