Analysis
-
max time kernel
122s -
max time network
129s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
23/01/2024, 09:52
General
-
Target
2024-01-23_d520b864b2c0f2f587bd66f792c18d79_ryuk.exe
-
Size
27.9MB
-
MD5
d520b864b2c0f2f587bd66f792c18d79
-
SHA1
df323fce064c2f9c86bbd8e731397dba272e9224
-
SHA256
b3cb1c0e687e89df67de0870c9a39d44e414b2152ce0d54b971be9ca92d26b2b
-
SHA512
5d658b024e57f23a3917e693cf7b55209a1eafe444b83fdf92abc7ecb76e4c2a35442991b33bd9bcc9622e2d670b74cd49437477e486e7d9f881d5b1ab141f93
-
SSDEEP
196608:dHOJym93t0jhpo6MJuBWVUWZa40cuWNyuKeggmW3gcWbwMjRA0dh7SJS61RDo7RK:dHOJN9eNpo6QqljRWwcPzSg+L1Q
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-23_d520b864b2c0f2f587bd66f792c18d79_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-23_d520b864b2c0f2f587bd66f792c18d79_ryuk.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB