Analysis
-
max time kernel
135s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
23-01-2024 16:50
General
-
Target
2024-01-23_b94c91a04154cc7347d74522f4d1445e_ryuk.exe
-
Size
1.8MB
-
MD5
b94c91a04154cc7347d74522f4d1445e
-
SHA1
e57a6e0e74d361a6c05ff75eb8e6bddf9e9b056b
-
SHA256
89486edb136eb5f8bd3fe234620def7649f31af557cd7d5bdfd5f26d564309b7
-
SHA512
8e274fd2ae7f415a7d11e362c1246820854499394cfda54040fe7bb5083940efaee3461bd1300b48c1ce2513c1b0a4ef1397ec031469f646387bd0e0a9cc4243
-
SSDEEP
24576:ZT1npwJ+RMatr0zAiX90z/F0jsFB3SQk:VNdMaB0zj0yjoB2
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-23_b94c91a04154cc7347d74522f4d1445e_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-23_b94c91a04154cc7347d74522f4d1445e_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.9MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.9MB