Analysis
-
max time kernel
121s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
20/04/2024, 21:47
General
-
Target
2024-04-20_e56ef4e8ab266625ce99a9a869f84357_ryuk.exe
-
Size
1.4MB
-
MD5
e56ef4e8ab266625ce99a9a869f84357
-
SHA1
afa187422c6ccec070bbde868e4b619af8344ff2
-
SHA256
cde63a953039beb02eddfa772b4c9f2dd47959d4b1fe1509129b33841fe1daf3
-
SHA512
c3eef4a1a65d650c28f9e5be12db5ef5469fd3714fff893ff8fa22ce6be000164a25367544492c4bcf1d236f10a16b5d70d1c2830a9f5bfe95318d1826efaba9
-
SSDEEP
12288:RXDCAZzP/w24lh1Xc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DX:8ANw2431sqjnhMgeiCl7G0nehbGZpbD
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-20_e56ef4e8ab266625ce99a9a869f84357_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-20_e56ef4e8ab266625ce99a9a869f84357_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.1MB