Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
22/01/2024, 20:42
General
-
Target
2024-01-22_abbc1f684dcde7fba154dc3bf52ba2e8_ryuk.exe
-
Size
1.6MB
-
MD5
abbc1f684dcde7fba154dc3bf52ba2e8
-
SHA1
ee371589eef5ef7127bad4db69009ddb9f92f6e6
-
SHA256
671d5f553f713b81728255fbfb4fffb4871e48b13b0ab239317d9180b70f99cf
-
SHA512
e82569cf995c634e90ca2bc8eeb3c975afc4798b1de7e520cb6cc35648c808bfc45d03a9872a7649d816da4ccbe85a4058648ae15448eab4e5758d560f897c02
-
SSDEEP
24576:iANw243MCks7WE9F5pwg8zmdqQjC60jiHkU:iew25Cks7R9L58UqFJjskU
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-22_abbc1f684dcde7fba154dc3bf52ba2e8_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-22_abbc1f684dcde7fba154dc3bf52ba2e8_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
1.7MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.7MB