Analysis
-
max time kernel
0s -
max time network
54s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
05/01/2024, 05:49
General
-
Target
2024-01-01_bd9ea4114927ec0d52ce01018b8fa572_ryuk.exe
-
Size
9.5MB
-
MD5
bd9ea4114927ec0d52ce01018b8fa572
-
SHA1
f65779207c0139e109f2834b74b810974b93bd78
-
SHA256
230d2c5a466b86e6cc56c3a2b6a8fdc6af10a7a641a5125e1974753057bf56e0
-
SHA512
c905263cbe7ae0235a54d238c8d19a35823ed73ab1467ad9d3049ce01bea6ac2c834012545645309c7ad503fcace538e6eba921f136de3f60eca057af405597a
-
SSDEEP
196608:ZIOENSCsXDjDyf6L2WliXYrHW1j48RmU/3ZlsPvyK0y8CgkIrMJk4jM:6OE8CEDVL2ciIrHWhtN3ZWylkIQu4j
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-01_bd9ea4114927ec0d52ce01018b8fa572_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-01_bd9ea4114927ec0d52ce01018b8fa572_ryuk.exe"1⤵
-
C:\Users\Admin\AppData\Local\Temp\2024-01-01_bd9ea4114927ec0d52ce01018b8fa572_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-01_bd9ea4114927ec0d52ce01018b8fa572_ryuk.exe"2⤵
-
-
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exepowershell.exe1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5207ba160fe006c9922699f39c0234be1
SHA129263e50c5fd8c7866066240200587daab6d44e2
SHA2569fd244fc73d63a9e7d609089ee974249bc5db8637b81b6b5597321f15051512c
SHA5127df8a61d587130afd1ae442a6190dfbd9527260191f42e1de7cb9737d14a4d692eddce570a5a37da39213e760acd6b62e287afe51e6a1d9d430dcdf1004762a9
-
Filesize
1KB
MD58a9e98ccb9b6de59439577ae791151f3
SHA1d6e5a03ebf3e8f1d62f715c58ba2e5f96b3cab69
SHA256644cc98e8cee235125c13924c6b37db48a8e83ebd22c0e5996d2dd1f4cefff37
SHA51283da2c36e1ff9b12b2d3c23fc14680d0b05c5a3a663420289f5de3fc5042a95265f46f98e41bf30266cefa340962185f54c752e0815801c4eb241d7d44c3d0af
-
Filesize
136KB
-
Filesize
10.8MB
-
Filesize
472KB
-
Filesize
272KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
10.8MB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
10.8MB