Analysis

  • max time kernel
    0s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10-03-2024 12:44

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2024-03-10_f63d75eb43c9eddb4f87d7826c13a8f2_ryuk.exe command="C:\Users\Admin\AppData\Local\Temp\2024-03-10_f63d75eb43c9eddb4f87d7826c13a8f2_ryuk.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.

General

  • Target

    2024-03-10_f63d75eb43c9eddb4f87d7826c13a8f2_ryuk.exe

  • Size

    1.6MB

  • MD5

    f63d75eb43c9eddb4f87d7826c13a8f2

  • SHA1

    b816883fb74db1d21a06bd435fe4253aff18e9a3

  • SHA256

    db24c3dc4c1366c0ea3a68182d10e2a227c67d1b6fab5573f7c265fa8326e2ef

  • SHA512

    b82f2293d08d54d260da7384160310d740ea0c5b2f04e99b29c574d31f3e5babf172c9cef836293b56d91b32cf13898d388b0a6fbeb61e9d9241dd9db0bea43e

  • SSDEEP

    24576:iPxXh8qZZuu/BtFy/e/HAuzlOpZeT3W1MEUnApNbBcHuNxu2jM2I:iBuq6eBtM/6HAMl5nKNbBDNxdjM

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-03-10_f63d75eb43c9eddb4f87d7826c13a8f2_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-03-10_f63d75eb43c9eddb4f87d7826c13a8f2_ryuk.exe"
    1⤵
      PID:2568

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2568-0-0x0000000140000000-0x00000001401B6000-memory.dmp

      Filesize

      1.7MB