Managed XDR

8879a8d1508c3297200c60...bfe12_dump7_0x35000000 (Ryuk) — malware analysis report

File info

Filename: 8879a8d1508c3297200c608f3a93da5387521767c050f17aed78dde8a0cbfe12_dump7_0x35000000
File type: PE32 executable (GUI) Intel 80386, for MS Windows
File size: 164 KB
First seen: 2025-01-31 00:45
Last seen: 2025-02-01 04:55

win7/x86 en

yara_rules: Static rules

ryuk: Detected Ryuk ransomware

process_crashed: One of the processes has failed

unexpected_exception: Unexpected exception

no_graphical_activity: No graphic activity

cve_2020_1599: PE file contains scripts in overlay

pe_overlay: PE file contains overlay