Analysis

  • max time kernel
    120s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    28-04-2024 10:05

General

  • Target

    2024-04-28_8b6240d65026c98c40d296fd9f463874_ryuk.exe

  • Size

    5.5MB

  • MD5

    8b6240d65026c98c40d296fd9f463874

  • SHA1

    415f4c6e2d0d0126341458558cbd011a5c557ffe

  • SHA256

    c6f300b2d261ee2624fafa685cc867d8d64cfc5013130c939d5ce010c8afddf0

  • SHA512

    b3bc9ef9818b86d67063a5fd15c865524beb290727699fddc8c0fe2b30e2ad8e2ddce9eaa8475e40ab3d6e1377dcf45914fdde5cf6d1c435aebd60dedb58caca

  • SSDEEP

    49152:BEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfJ:lAI5pAdVJn9tbnR1VgBVm/65tUV

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-04-28_8b6240d65026c98c40d296fd9f463874_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-04-28_8b6240d65026c98c40d296fd9f463874_ryuk.exe"
    1⤵
      PID:2176

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2176-0-0x0000000140000000-0x0000000140592000-memory.dmp
      Filesize

      5.6MB