Analysis
-
max time kernel
144s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
18/01/2024, 22:26
General
-
Target
2024-01-18_122c7edb92d210fb638b2daada2ae644_ryuk.exe
-
Size
1.7MB
-
MD5
122c7edb92d210fb638b2daada2ae644
-
SHA1
119c69f27b1a05b3baf5bad67e3e836894a2d575
-
SHA256
0f1aae744b5d23d75c16b0c53a0e0b12f39c3e9ce4e6f2d2dfee74a354ffe5ab
-
SHA512
c52c1a2d946f92324e816c985a6c2850103f67bd8f7c7784fb27ddce45366406b670288d585e2b967f4a8bdeeb3aeea5f7e1917194d6469d688362caa15ea132
-
SSDEEP
24576:ZANw243UCks7WE9F5pwg8zmdqQjC60jiHkU:Zew2lCks7R9L58UqFJjskU
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-18_122c7edb92d210fb638b2daada2ae644_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-18_122c7edb92d210fb638b2daada2ae644_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.7MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.7MB
-
Filesize
384KB