Analysis
-
max time kernel
91s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
27/01/2024, 10:05
General
-
Target
2024-01-27_ffbb9b2963edcd089c2d7f16c391be50_ryuk.exe
-
Size
2.2MB
-
MD5
ffbb9b2963edcd089c2d7f16c391be50
-
SHA1
7b951f407807ec24c51db1dc5e7e9c1d3c00872a
-
SHA256
c7a856bf22ef8244be30b96b473f343bc0d79aa8371b6eff035fab49a802f0f8
-
SHA512
ca8ffff71ab994475278c410b1d8a513912a6b2d637ce74d9351611265911f07ab99265aaa6f1315c9afa5c903d8120c08a74a78d059e7d2dc782dd3b220b949
-
SSDEEP
49152:eNl7soq7sQCc1kyG2xHywRfHIO2Ts4bvDdEjhMjSax84:aD2311kaxp9qdQWdO
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-27_ffbb9b2963edcd089c2d7f16c391be50_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-27_ffbb9b2963edcd089c2d7f16c391be50_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.3MB