Analysis
-
max time kernel
144s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
18-02-2024 17:01
General
-
Target
2024-02-18_aa5a128b6d97df81cfc19546780ec481_ryuk.exe
-
Size
1.9MB
-
MD5
aa5a128b6d97df81cfc19546780ec481
-
SHA1
f81046fa60c7fcdad9ada89461bfe449646a17ac
-
SHA256
d05afebaa3b1bd00f26326663233ab2ac3af7c21cc144aa3df40d791fb79ec41
-
SHA512
df0995c63cf5978609e7dbefbd58432af5c79391cc4664f486c2ad8960d3047cb23c5e095e582ad7406f0d318c75186291f30d2c41caf58ac8582fe078f513ee
-
SSDEEP
24576:+6V6CC/AyqGizWCaFbyBCks7WE9F5pwg8zmdqQjC60jiHkU:+6csGizWCaFb6Cks7R9L58UqFJjskU
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-18_aa5a128b6d97df81cfc19546780ec481_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-18_aa5a128b6d97df81cfc19546780ec481_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.9MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.9MB