Analysis
-
max time kernel
92s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
11/04/2024, 13:29
General
-
Target
2024-04-11_e4bc5209c3c6f30ccd7ea3090e00b1fb_ryuk.exe
-
Size
1024KB
-
MD5
e4bc5209c3c6f30ccd7ea3090e00b1fb
-
SHA1
2ad9957f8ff7dcb5de87417312c1e8bd0b7b79e8
-
SHA256
829b8b113d96f4d48e10ebbd41e65ce4b8ad030b1b853d316691bb60641afd3b
-
SHA512
6eaf578923ff47a19529552ddec496fd50b57f1268065cfbe3e25ffdeae521dd0d18adb2f27817ff0e942f7b528c67f948e1dce6a4c8f38b6fa5cebf6c0d3d15
-
SSDEEP
24576:ysHmhwHXiUCM7lmj3hxoKtR77DsZrvErv:ysHQwKI0hxoK7UZrCv
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-11_e4bc5209c3c6f30ccd7ea3090e00b1fb_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-11_e4bc5209c3c6f30ccd7ea3090e00b1fb_ryuk.exe"1⤵
- Suspicious use of AdjustPrivilegeToken