Analysis
-
max time kernel
142s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
19/02/2024, 10:42
General
-
Target
2024-02-19_16993d9d74a841993a56740ec338eb61_ryuk.exe
-
Size
1.5MB
-
MD5
16993d9d74a841993a56740ec338eb61
-
SHA1
15c40541d62cf0a0a5d1c32073ff6d4586148e0b
-
SHA256
5729ab84e97f50eaa0f1d151d40c1e1edfab8f587f41a6935500f03598922eca
-
SHA512
5620872384d1ac8c8939d3199dfabb27ebace261d700f5439535004472336108eb3a482bd5bc46f9b6182990ee246de0d6fccf1aa0876b0d58cef5e4ba8c472d
-
SSDEEP
24576:yTKnpwJ+Rx6LaRFdGJm0Q3WKVSwdr13Ek0VA:aGdx6KFdi2Ga9x3Ek0V
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-19_16993d9d74a841993a56740ec338eb61_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-19_16993d9d74a841993a56740ec338eb61_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.2MB