Analysis
-
max time kernel
91s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
24-01-2024 06:26
General
-
Target
2024-01-24_3a653b32fdd606e072d2cbcea3196fc8_ryuk.exe
-
Size
1.8MB
-
MD5
3a653b32fdd606e072d2cbcea3196fc8
-
SHA1
be047345a449e7601c95fe88ab1307276547a324
-
SHA256
2965f61593123b0e4563ea4102318d75cf558de8b9a17df10b5e09b180ad3605
-
SHA512
42200042d4b9a5dcf264c5fbb6daf110b91ec5fbe28744c3fc68dcaf892c02af2d3bca97773ef3bc235ff70c83ff76aaffb1c1ef6ca555579638b4be272c53ee
-
SSDEEP
24576:vKjdRz0DzOswhCw+5fCpmALmQjdjIucF93i0Md2JOt934J7Z6bQaj1BvUm9J:vKX0DzOswXefymHQlIuQRJE3jM2ce
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-24_3a653b32fdd606e072d2cbcea3196fc8_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-24_3a653b32fdd606e072d2cbcea3196fc8_ryuk.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
1.9MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.9MB