Analysis

  • max time kernel
    136s
  • max time network
    163s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06-02-2024 05:28

General

  • Target

    2024-02-06_862d52ff6b90af9af29bed0b3369f9cf_ryuk.exe

  • Size

    691KB

  • MD5

    862d52ff6b90af9af29bed0b3369f9cf

  • SHA1

    73b0a4288ca6cf6298bcec2284b74bbdd314fceb

  • SHA256

    0527031dd15a1645b0b05b1403c87e4e09084f7c8dbae18477ee2a1be854a1fe

  • SHA512

    8a112f456e8f880d6ab0fc696e455afb70886fa65c8f107f579407ef33e3759a06e3401257fe64d9d412b654dbe6ed3105644add53143c14b0c8348bde2093dd

  • SSDEEP

    6144:WN2JM9r9U4fLms97Ys3zJUvPLLHZeLGAid3sc09xJTtP7/F30EGZ7p:WN2JKLms98QzI/GGAidc39MEGp

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-02-06_862d52ff6b90af9af29bed0b3369f9cf_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-02-06_862d52ff6b90af9af29bed0b3369f9cf_ryuk.exe"
    1⤵
      PID:4776

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4776-0-0x00000200C7AC0000-0x00000200C7AC4000-memory.dmp
      Filesize

      16KB

    • memory/4776-1-0x00000200C7990000-0x00000200C7997000-memory.dmp
      Filesize

      28KB

    • memory/4776-2-0x00000200C7AB0000-0x00000200C7AB5000-memory.dmp
      Filesize

      20KB

    • memory/4776-4-0x00007FF60F580000-0x00007FF60F624000-memory.dmp
      Filesize

      656KB

    • memory/4776-7-0x00000200C7AB0000-0x00000200C7AB5000-memory.dmp
      Filesize

      20KB

    • memory/4776-6-0x00000200C7AC0000-0x00000200C7AC4000-memory.dmp
      Filesize

      16KB

    • memory/4776-9-0x00000200C7AB0000-0x00000200C7AB5000-memory.dmp
      Filesize

      20KB