Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
16-04-2024 09:48
General
-
Target
2024-04-16_1f244af2e756f8152a885567ee4bc7f4_ryuk.exe
-
Size
1.5MB
-
MD5
1f244af2e756f8152a885567ee4bc7f4
-
SHA1
36dda8fa7067f8ede4e5f2b08f8b82b2f2552606
-
SHA256
e6d51658460e85313dc9d2226cce892ddcfd4b0bbab136372f2f67389e1868a3
-
SHA512
b4bfc8080521b2c145e1545cce8e04a8851504d8beddb2e16d7bc4ce4e1e7526d29f1bbd68762b17e8133f3dbf384966ee3e80e42e141adbbd09652dbd5ec6fa
-
SSDEEP
24576:aTKnpwJ+Rzl11tmlNQ2OnBdFQtP51llPup33kT:CGdR11tmlNQ2ayVup3
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-16_1f244af2e756f8152a885567ee4bc7f4_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-16_1f244af2e756f8152a885567ee4bc7f4_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.2MB