Analysis

  • max time kernel
    90s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28/01/2024, 17:44

General

  • Target

    2024-01-28_d4aba0e45322e97570684504e4d17229_ryuk.exe

  • Size

    1.7MB

  • MD5

    d4aba0e45322e97570684504e4d17229

  • SHA1

    b3286a0514cdd7f8174aae29abb297c7293bbd9c

  • SHA256

    447c1540c94080dba3cdc1233af8f9a4738bc8ecda49e79e5c561619450cda36

  • SHA512

    62583e70834eea1a614da1f8de3866a1cb6dd46e6691d4752bb96e1343d6ed5006b3971066b0c6df2dbd5288da8b4ad8b7893cc484dcc411b384ca75087102ad

  • SSDEEP

    49152:tgV944pWjgciPpnzQNX8V86ULNiXicJFFRGNzj3:tS6gcQnGXkzU7wRGpj3

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-01-28_d4aba0e45322e97570684504e4d17229_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-01-28_d4aba0e45322e97570684504e4d17229_ryuk.exe"
    1⤵
      PID:2384

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2384-1-0x0000000140000000-0x00000001401D1000-memory.dmp

      Filesize

      1.8MB

    • memory/2384-0-0x00000000020C0000-0x0000000002120000-memory.dmp

      Filesize

      384KB

    • memory/2384-7-0x00000000020C0000-0x0000000002120000-memory.dmp

      Filesize

      384KB

    • memory/2384-11-0x0000000140000000-0x00000001401D1000-memory.dmp

      Filesize

      1.8MB

    • memory/2384-9-0x00000000020C0000-0x0000000002120000-memory.dmp

      Filesize

      384KB