Analysis
-
max time kernel
122s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
08/03/2024, 11:25
General
-
Target
2024-03-08_3a5407a8993ed2a83f6845d625649d79_ryuk.exe
-
Size
2.1MB
-
MD5
3a5407a8993ed2a83f6845d625649d79
-
SHA1
ce610a92be33f5d1d2772bb78599eece8003e1d8
-
SHA256
aeaf84fea891a7a9ec91dd3bbc3d78aff8ecd0bfedbf433cfe073e8fe389792e
-
SHA512
d75deec70f22c845ca853fc0169e4bd3e170bd965522760f5c116aab2285fc36e8225afcd00c52b017727cb7777153a177f56d16bb23c1be8d89b2ca2b4de22d
-
SSDEEP
49152:Ja/3xXBSZ4K5MJ1LvTMxblsYBYSgxu9+fw4ToCks7R9L58UqFJjskU:5Z4K5MJablsYNBC17DVqFJU
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-03-08_3a5407a8993ed2a83f6845d625649d79_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-03-08_3a5407a8993ed2a83f6845d625649d79_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
384KB