Analysis
-
max time kernel
147s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
-
submitted
21/02/2024, 22:52
General
-
Target
2024-02-21_b7786e34f61365caf54142b5a9a020ed_ryuk.exe
-
Size
2.2MB
-
MD5
b7786e34f61365caf54142b5a9a020ed
-
SHA1
bb3838f2c8659112865dcfc6d4b0e217758eb81b
-
SHA256
11991d98cdabf14730af854fe0698a74a736235758770b9b73a40d5fae898777
-
SHA512
c1bdfa4d402e5dfba49a02026ca842da187bc9ee22946ac3d130d9907ed260555a102fbb5b76859c7554ca6ad25214631629b0f62d5fb0925150f6adadd95971
-
SSDEEP
49152:fFdZ6npCxnngx12Z7zIFqrFG2RFkbADmg27RnWGj:9Bxnk2Z79nND527BWG
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-21_b7786e34f61365caf54142b5a9a020ed_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-21_b7786e34f61365caf54142b5a9a020ed_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.3MB