General
- Target [Ryuugames] RY-4643090.rar
- Size 154.1MB
- Sample260721-2askeastay
- SHA256 fd6ef8204f96bbadcac299e1427c27380afd86427d8526c9793952bf51ee4c0d
- MD5 617297fdae29c96f14f8965ccde5e66e
- SHA1 8e2e77a75f45d4b19d52b1cadc4e7b3739a4d54e
- SHA512 f905463030054e4c49ae995268c8e66452d080489513a3627c9871e60175dd0b2b229c80c972378a2a6a85d5b02c1d936e18a568759cda6d7d813b76edce0068
- SSDEEP 3145728:i/u3eBjVCrREJX/cZF4dJPAwnrL+KHw/8Ve8Y4J9KvDly1Q:itVrX/75lnrRQ/Ke8Y4cI+
- TLSH T141783378D751616609DC6F298A033BF864E8F84B898436FE93FCA6DE1305393CC519E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
[Ryuugames] RY-4643090.rar
Resource
win10v2004-20260513-en
12 signatures
600 seconds
Behavioral task
behavioral2
Sample
[Ryuugames] RY-4643090.rar
Resource
win11ltsc2024-20260709-en
15 signatures
600 seconds
Malware Config
Targets
-
- Target [Ryuugames] RY-4643090.rar
- Size 154.1MB
- SHA256 fd6ef8204f96bbadcac299e1427c27380afd86427d8526c9793952bf51ee4c0d
- MD5 617297fdae29c96f14f8965ccde5e66e
- SHA1 8e2e77a75f45d4b19d52b1cadc4e7b3739a4d54e
- SHA512 f905463030054e4c49ae995268c8e66452d080489513a3627c9871e60175dd0b2b229c80c972378a2a6a85d5b02c1d936e18a568759cda6d7d813b76edce0068
- SSDEEP 3145728:i/u3eBjVCrREJX/cZF4dJPAwnrL+KHw/8Ve8Y4J9KvDly1Q:itVrX/75lnrRQ/Ke8Y4cI+
- TLSH T141783378D751616609DC6F298A033BF864E8F84B898436FE93FCA6DE1305393CC519E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.