Analysis

  • max time kernel
    136s
  • max time network
    161s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    04-02-2024 09:54

General

  • Target

    2024-02-04_b8402599a718bd3d0eae4de73795ed65_ryuk.exe

  • Size

    1.6MB

  • MD5

    b8402599a718bd3d0eae4de73795ed65

  • SHA1

    2012f83f01500b1eee4a139c476fcda77a53fcb9

  • SHA256

    14c5e335b6a6c22ad2497649a8c23d3703b673b6c48fc0eb0bc1e76678d469b4

  • SHA512

    4bcde7e045d827389b912ed3e6d0964f4eb6fbe22224c75dd2b5a30c76cd79a348a7a2e74d65576e824c786c09c6bbfeb9f1f7486eecaa2db9956143b111f993

  • SSDEEP

    49152:Do4o2O9f65YTz7jGnD3D121zsaxPu1HBm/qIFI2t7:DTMwrMqhZIG2t7

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-02-04_b8402599a718bd3d0eae4de73795ed65_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-02-04_b8402599a718bd3d0eae4de73795ed65_ryuk.exe"
    1⤵
      PID:548

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/548-0-0x0000000140000000-0x000000014019A000-memory.dmp

      Filesize

      1.6MB