Analysis
-
max time kernel
93s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
01/02/2024, 19:26
General
-
Target
2024-02-01_a6916c7e71dcbb5082a14dfbe5b4ffae_ryuk.exe
-
Size
1.5MB
-
MD5
a6916c7e71dcbb5082a14dfbe5b4ffae
-
SHA1
58c545b03f1660fd6872d84aad2207a46dc6bf3a
-
SHA256
9dc2f3587bcdb79cf4860085f4321cdb85e2a6ae95646aa50494c2b3ad275f8b
-
SHA512
17dc68485be64734b2e9c19f69ff6dfca155ab1466ad32300295427cc95b692a7e33241ffb3f22160c8c595417ce41a3993f01949584ea734aa195525c4a19e9
-
SSDEEP
12288:+771GlvQRSyVammkfCrljcdTlkGNA+KpxXh+clcIHZWMPBTUfTyu6RWYfCB4O:Q8IRzVakfCrljccgA7jsMKrWfCBr
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-01_a6916c7e71dcbb5082a14dfbe5b4ffae_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-01_a6916c7e71dcbb5082a14dfbe5b4ffae_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.2MB