General
- Target 2025-05-27_4d5370f0310d9097f545ab21359dc88d_ryuk
- Size 662KB
- Sample260803-jkt7waeb55
- SHA256 531e61e5376d7e7aff0a33752074fc1914039273545ddbeeb408866ad8889270
- MD5 4d5370f0310d9097f545ab21359dc88d
- SHA1 2895e1dc65c79c2191c9d240d5f2ca8d491fcaf5
- SHA512 1bf31db9b81786092a77f1228d3dc4e207a31bfcd4a8f26d03344d307603f069c65c6c9cef68336c531220648ff77ad25553851c3e09f2ab279730b5a64a1bb4
- SSDEEP 12288:D2VgtKry5KIL2wAARPqqeT0czd0jQHKfZw7cZPq4LISTNxSk:Qg75KIL2wLRPqqeT1+4ki4LIEXS
- TLSH T1B0E41246B2D410F8E1378531C9A24A66D3B2F4764730977F23A583192F736958E3BFA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2025-05-27_4d5370f0310d9097f545ab21359dc88d_ryuk.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
2025-05-27_4d5370f0310d9097f545ab21359dc88d_ryuk.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
valleyrat_s2
Version
-
1.0
C2
-
27.124.17.227:466
-
27.124.17.229:445
-
127.0.0.1:80
Attributes
-
campaign_date
2025. 5.25
Targets
-
- Target 2025-05-27_4d5370f0310d9097f545ab21359dc88d_ryuk
- Size 662KB
- SHA256 531e61e5376d7e7aff0a33752074fc1914039273545ddbeeb408866ad8889270
- MD5 4d5370f0310d9097f545ab21359dc88d
- SHA1 2895e1dc65c79c2191c9d240d5f2ca8d491fcaf5
- SHA512 1bf31db9b81786092a77f1228d3dc4e207a31bfcd4a8f26d03344d307603f069c65c6c9cef68336c531220648ff77ad25553851c3e09f2ab279730b5a64a1bb4
- SSDEEP 12288:D2VgtKry5KIL2wAARPqqeT0czd0jQHKfZw7cZPq4LISTNxSk:Qg75KIL2wLRPqqeT1+4ki4LIEXS
- TLSH T1B0E41246B2D410F8E1378531C9A24A66D3B2F4764730977F23A583192F736958E3BFA2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Adds Run key to start application