Analysis
-
max time kernel
91s -
max time network
99s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
09-04-2024 15:50
General
-
Target
2024-04-09_ede1fcde1e752a2b7d17b5df40579486_ryuk.exe
-
Size
1.7MB
-
MD5
ede1fcde1e752a2b7d17b5df40579486
-
SHA1
ff3e93136b1739eda0c13d0b031ed25bd75d3577
-
SHA256
fee1b3b09cb0794dfaf1135b0c0be4ac5c5c1d34026aac3dfb6dba1be6524c0e
-
SHA512
b9501b40f486100896fe0df95f553491ec653748304151ce509f1df04ae60ab265e9553818c591212ec1e6e3407898bc610953d1e2e009dbf3022ca53a4798c0
-
SSDEEP
24576:C6V6fC/AyqGizWCaFby+SRQ5UOOU62FBnO+E222YJbNEUQKGOb:C6cVGizWCaFbP5UbU62FAQ228QKl
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-09_ede1fcde1e752a2b7d17b5df40579486_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-09_ede1fcde1e752a2b7d17b5df40579486_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.7MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.7MB