Analysis
-
max time kernel
145s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20250217-en -
resource tags
-
submitted
06/03/2025, 19:46
General
-
Target
2025-03-06_6c00c2a4a51ab0484b32a1e699e8f403_ryuk.exe
-
Size
691KB
-
MD5
6c00c2a4a51ab0484b32a1e699e8f403
-
SHA1
65a5b0724a754ff9aa549ec6ff3affec8bdd4af0
-
SHA256
753c41c1213c462834a990476d9c327050176509eae093a574190d3726fe8cb0
-
SHA512
e39b8bb555771725ca45d027cc32c40e34f0ec95baaf7069f91b20735d9fd1ea2fdb0e26a91d6ed191065f577a5e535eb660d54c9f121691f138d84b356843c1
-
SSDEEP
6144:jN30RyG9seFais9ybKzf+kFLLdOauLSAers509xJTtP7/F30rJyQBK2T7ge:jN309ais9yGznF+LSAewy9MrJAU/
Score
10/10
Malware Config
Signatures
-
Azov
A wiper seeking only damage, first seen in 2022.
-
Azov family
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Enumerates connected drives 3 TTPs 23 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in Program Files directory 5 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2025-03-06_6c00c2a4a51ab0484b32a1e699e8f403_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2025-03-06_6c00c2a4a51ab0484b32a1e699e8f403_ryuk.exe"1⤵
- Adds Run key to start application
- Enumerates connected drives
- Drops file in Program Files directory
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
-
Filesize
20KB
-
Filesize
656KB
-
Filesize
20KB
-
Filesize
28KB
-
Filesize
20KB
-
Filesize
16KB