Analysis
-
max time kernel
92s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
13/02/2024, 12:44
General
-
Target
2024-02-13_3236230df7927d64269108ea87265e36_ryuk.exe
-
Size
2.2MB
-
MD5
3236230df7927d64269108ea87265e36
-
SHA1
76db931ee0943dc6e6fea6528efba5ef151d5345
-
SHA256
543e558cdd81f4b74da5e833fb54fa15380b6d07d0e5a3ab253278558ba1f074
-
SHA512
92abc543938941295cfbd713bf4a6770a3053670fb4a128e5fdf998f741f13ec3bb6a3ea893573302c6c2f72548c964eb855c50fdd9c39f9b551669dc1e4ea3e
-
SSDEEP
49152:VNl7soq7sQCc1kyG2xHywRfHIO2Ts4bvDnkQ/qoLEw:dD2311kaxp9qTqo4w
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-13_3236230df7927d64269108ea87265e36_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-13_3236230df7927d64269108ea87265e36_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.3MB