Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
06/03/2025, 18:59
General
-
Target
2025-03-06_d2da4a824e7f0adf3d123e7e928be701_ryuk.exe
-
Size
1.5MB
-
MD5
d2da4a824e7f0adf3d123e7e928be701
-
SHA1
73a35316286fa71354b7f70297b5352856e91b55
-
SHA256
5e6415deaf980660f1d4e2370288a2942e08a0a44e7269446433c3dfba1f3dd4
-
SHA512
1ba8325721ac28982f7a5c01d7f061bc14e5e57d4e242f6ad50cc334bdbe7c733ff8077b449d19a49c8668d68f82b08592602c49c8d1b92f143bcfc9c4b7ef8b
-
SSDEEP
49152:R+dY+HsrHNIyuMMyU6T7PmpclbwbWAaJiwmqTjcoezo:vdvR7OxqPFZ
Score
10/10
Malware Config
Signatures
-
Azov
A wiper seeking only damage, first seen in 2022.
-
Azov family
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2025-03-06_d2da4a824e7f0adf3d123e7e928be701_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2025-03-06_d2da4a824e7f0adf3d123e7e928be701_ryuk.exe"1⤵
- Adds Run key to start application
- Enumerates connected drives
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
28KB
-
Filesize
16KB
-
Filesize
16KB
-
Filesize
20KB
-
Filesize
20KB
-
Filesize
20KB
-
Filesize
20KB