Analysis

  • max time kernel
    121s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    17/04/2024, 03:51

General

  • Target

    2024-04-17_6e21a17cdbabb50619f05005f00a3c83_ryuk.exe

  • Size

    5.5MB

  • MD5

    6e21a17cdbabb50619f05005f00a3c83

  • SHA1

    9a2210646b8a4797d9bef52604ebf911d59986ea

  • SHA256

    6fcb04fe3455176b269ec96ad1d013ca0adeb835a110035175f9a742e7dfb62d

  • SHA512

    f143f4268ec6e99c24bdfb2ecb1d447c4357a2737bcf77a8cc1ccf5f890585fef64e062f3ea9da412fc4cc73f2998767c07096544e13d7e94db4e1f49bf68f7e

  • SSDEEP

    49152:CEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGf3:IAI5pAdVJn9tbnR1VgBVmsEnW6at

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-04-17_6e21a17cdbabb50619f05005f00a3c83_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-04-17_6e21a17cdbabb50619f05005f00a3c83_ryuk.exe"
    1⤵
      PID:2136

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2136-0-0x0000000140000000-0x0000000140592000-memory.dmp

      Filesize

      5.6MB