Analysis
-
max time kernel
122s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
18-01-2024 22:55
General
-
Target
2024-01-18_736888b9d269010f51004c0874ab4a3f_ryuk.exe
-
Size
1.5MB
-
MD5
736888b9d269010f51004c0874ab4a3f
-
SHA1
5e50c8510d332f88803eb248abe23261ae410080
-
SHA256
9bde7bd9650f4a3ae04f32668f4d3f86f2f6662598145ac01eab3452511505f2
-
SHA512
3a1869673a8af7b34cacdd0e0d56a38b5da438606ede6c19e9fd915cffb47dcdc22f80e9b4ef7e3685e143afefee40b4d8d89ea17497229920239946e8bddd51
-
SSDEEP
24576:gTknpwJ+RIEQkbvK8N3t3QVkLhoo+SVfhl2/:YQdIErvL73RLSo+2fhl
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-18_736888b9d269010f51004c0874ab4a3f_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-18_736888b9d269010f51004c0874ab4a3f_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
1.5MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.5MB