Analysis
-
max time kernel
122s -
max time network
132s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
24-01-2024 11:28
General
-
Target
2024-01-24_796a9dfdc810b54c01cd42e24a4b5a90_ryuk.exe
-
Size
27.8MB
-
MD5
796a9dfdc810b54c01cd42e24a4b5a90
-
SHA1
08bc36d4e0aa9865d8806bf4300eaf5a6fd63c4e
-
SHA256
defadd0039aaf72bf318a4d72da2e47d01af4acc8122fe712a7f04038b1fceba
-
SHA512
04730cd881a6b69ec6c0d97c99a754fe8c05b2676268c3c7c66595b41d92dc97231d6b79f20b66c59aa8c95cd66282ecd3ec37f7e4bd9e6fe0c3d77259c3f8b6
-
SSDEEP
393216:87ov3F7kCt4ED2nS55SpMrLQPL5KCsks+qMT:es1Am4ED2n1gET5KCsh+qA
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-24_796a9dfdc810b54c01cd42e24a4b5a90_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-24_796a9dfdc810b54c01cd42e24a4b5a90_ryuk.exe"1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
8KB
-
Filesize
8KB