Analysis
-
max time kernel
143s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
24/01/2024, 19:43
General
-
Target
2024-01-24_94fc43f09587a88cc68c60781ed4e06e_ryuk.exe
-
Size
2.2MB
-
MD5
94fc43f09587a88cc68c60781ed4e06e
-
SHA1
1d92701852197511a3677b01a7883515c9b37bde
-
SHA256
3329c2dd77deaabedd258108b7be816091ccd6b5f3f44ed00c6d73a95942af43
-
SHA512
d02e928c2d9b6ec21117d33f6d1e004abfcce5996bf2d5649fdc8e449653faccfdd217ece72a918b20bc6fb4d8c5f369862e332e64deac84192f8fee62baf427
-
SSDEEP
49152:iNl7soq7sQCT1kyG2xHywRfHIO2Ts4bvDt/snji6attJM:GD23a1kaxp9qtEnW6at
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-24_94fc43f09587a88cc68c60781ed4e06e_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-24_94fc43f09587a88cc68c60781ed4e06e_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.3MB