Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
27/01/2024, 18:53
General
-
Target
2024-01-27_eb26aa6ab8df304ee8943c753803e377_ryuk.exe
-
Size
1.8MB
-
MD5
eb26aa6ab8df304ee8943c753803e377
-
SHA1
5bb4db5737f3ba245d1e6da4144250d0bc106695
-
SHA256
ebbfdf75a9e2b66f188033551dd008bde95fa1c9eafa98dd2d2bb897bd9fe4b6
-
SHA512
310ead78a0f42b8f54e313dfa44094e61f856d45e1cf80e44bfb7c207a200334be8087a539295f2a6608aa99a4771036947e1dc408f7b8e037a192229c4bfee2
-
SSDEEP
12288:ylLMLTgAXoUpkdJAdGydeSMIO74u8k7UtnzPgGeB0dPoIlaNyF/ofCVGGfX134Rb:JTJnpwJ+Rdet/HU9zPjeidP1Yi/dGyA
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-01-27_eb26aa6ab8df304ee8943c753803e377_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-01-27_eb26aa6ab8df304ee8943c753803e377_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
1.8MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.8MB
-
Filesize
384KB