Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    24/01/2024, 08:02

General

  • Target

    2024-01-24_26826e2b5e390a9faa0ea8ea81ed2926_ryuk.exe

  • Size

    1.6MB

  • MD5

    26826e2b5e390a9faa0ea8ea81ed2926

  • SHA1

    3575312b65db5af065c8c30471901cb32bbb3d9e

  • SHA256

    bae8396423d5cca44fdc3cd89e8d5a22097985162d8d8a0b54ce7a989e1dff67

  • SHA512

    90a7ff4e148561f46b80336d7d051f88338343e6719329da6515d150c4ed800cee83d43af56d59581f62a24a92a95e9b6dfc30247d20a03a533b3f0cadc351dc

  • SSDEEP

    24576:16V6oC/AyqGizWCaFbyft2rR8FfBhRJUEbDk1ulU/:16cKGizWCaFbkt2r4PRSEk1ul

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-01-24_26826e2b5e390a9faa0ea8ea81ed2926_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-01-24_26826e2b5e390a9faa0ea8ea81ed2926_ryuk.exe"
    1⤵
      PID:3028

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/3028-0-0x0000000140000000-0x000000014019A000-memory.dmp

            Filesize

            1.6MB

          • memory/3028-1-0x0000000140000000-0x000000014019A000-memory.dmp

            Filesize

            1.6MB