Analysis
-
max time kernel
137s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
18/01/2024, 22:57
General
-
Target
2024-01-18_7bb71b4ed855ac1e46f09ebdc2969f9d_ryuk.exe
-
Size
1.4MB
-
MD5
7bb71b4ed855ac1e46f09ebdc2969f9d
-
SHA1
61e17fca5a6e2ce992ac5c99de44e10f61e26451
-
SHA256
133f92eda1d060b7dd83d2e1cf9cae15f8b78622b0286805c2a4ff19ce5f18b1
-
SHA512
1364beb6fc17a9b8336746b95cb4a0f8f394b0beeeb6af9ba631e7a5ed4b4dd37ffc3cdadf84cf2a6d4b0a25de4fc3a500a4813a675d400c788b198cab177186
-
SSDEEP
24576:LANw243VEQkbvK8N3t3QVkLhoo+SVfhl2/:Lew2KErvL73RLSo+2fhl
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-18_7bb71b4ed855ac1e46f09ebdc2969f9d_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-18_7bb71b4ed855ac1e46f09ebdc2969f9d_ryuk.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.4MB
-
Filesize
384KB
-
Filesize
1.4MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB