Analysis
-
max time kernel
120s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240319-en -
resource tags
-
submitted
19-04-2024 10:19
General
-
Target
2024-04-19_685b015b390cd255f112090959c0a616_ryuk.exe
-
Size
2.1MB
-
MD5
685b015b390cd255f112090959c0a616
-
SHA1
da926568b28187e9aff63fd2ee283748e944aae9
-
SHA256
b5059d949f756cfc2d29786011f58344918febc0d7683bd958256af6365d3a35
-
SHA512
1849565d7f111a5233da48add80de3b3dae375f3e7c10a49c0172b30cc67443dfa9ac3e05ffc0505ce26033c9aacaec4f2538993a12a632533c21f9ae7d37c6a
-
SSDEEP
49152:WjFX33t4INlfTqkUMLu/52bulcI1wXZTBz5iGhaOIh1Dp33PM:W7fTqmeX14DIhZt/M
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-19_685b015b390cd255f112090959c0a616_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-19_685b015b390cd255f112090959c0a616_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
384KB