Managed XDR

b122165370b54a16f4fd19caee5fce00.virus (Ryuk) — malware analysis report

File info

Filename
b122165370b54a16f4fd19caee5fce00.virus
File type
PE32 executable (GUI) Intel 80386, for MS Windows
File size
176 KB
First seen
Last seen

Environment

win7/x86 en

Hashes

SHA1
89f26e894b37f5091a3e3227fa427d801357ff7e
SHA256
7506e5bb9e7ef0516bd9083105a456020bb24cf3b48a98142d49c8198eca0c67
MD5
b122165370b54a16f4fd19caee5fce00

Malwares

  • Ryuk

Signatures

Privilege Escalation

T1134 opens_process_token: Opens the access token associated with a process

Defense Evasion

T1134 opens_process_token: Opens the access token associated with a process

Other

yara_rules: Static rules
ryuk: Detected Ryuk ransomware
process_crashed: One of the processes has failed
no_graphical_activity: No graphic activity

Related reports