Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
13/02/2024, 21:53
General
-
Target
2024-02-13_d40bb7c9ec3c4ca6d5ea30feef124618_ryuk.exe
-
Size
1.9MB
-
MD5
d40bb7c9ec3c4ca6d5ea30feef124618
-
SHA1
5966b8cf029f83a42df817a0e629e34c8863a52a
-
SHA256
19e0cd80e93f3749fbfcecd836ec2863e629156e6d3722a56b602c2b96fc7656
-
SHA512
21ecc53db6fd625e4299fe25f41095475f926309c7b59e49696c123ef0ac845a7c0078385c068af81d1792253dbe62a18d15ff5abe8fc36d1d327b1e788b106f
-
SSDEEP
24576:KTKnpwJ+RcCks7WE9F5pwg8zmdqQjC60jiHkU:yGdcCks7R9L58UqFJjskU
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-13_d40bb7c9ec3c4ca6d5ea30feef124618_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-13_d40bb7c9ec3c4ca6d5ea30feef124618_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.9MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.9MB