Analysis

  • max time kernel
    121s
  • max time network
    129s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    18/01/2024, 22:57

General

  • Target

    2024-01-18_79fc32f294db9d1664ce77eca28a19f7_ryuk.exe

  • Size

    5.5MB

  • MD5

    79fc32f294db9d1664ce77eca28a19f7

  • SHA1

    82bc9a6fc0d5e5c022dc4cb51c859cf1f7c1fb1f

  • SHA256

    3e9462a47f2c4c36cf5ea654e66575e03c5586233552616abb3217b8a0950343

  • SHA512

    e9967ec4c62694249d05b3cd7916854dc3a49972ba98bbb84cac92e28bcb1f7aeb88c9f765c313933affea24f82355382a8a480cf1b2b52198fc39dbe711a1c8

  • SSDEEP

    49152:jEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1bn9tJEUxDG0BYYrLA50IHLGf:/AI5pAdV9n9tbnR1VgBVmeUf

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-01-18_79fc32f294db9d1664ce77eca28a19f7_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-01-18_79fc32f294db9d1664ce77eca28a19f7_ryuk.exe"
    1⤵
      PID:1992

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1992-0-0x0000000140000000-0x0000000140592000-memory.dmp

      Filesize

      5.6MB

    • memory/1992-1-0x0000000140000000-0x0000000140592000-memory.dmp

      Filesize

      5.6MB