Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
20/04/2024, 11:51
General
-
Target
2024-04-20_d7cbc10957f26b880d5e6d5aa82d7c99_ryuk.exe
-
Size
1.9MB
-
MD5
d7cbc10957f26b880d5e6d5aa82d7c99
-
SHA1
880648ec95bf904dddc3464d776f6cdb1f8d7572
-
SHA256
893b02be2db6d2746866274b0b10097fee954937845db664cb73b1428defefaa
-
SHA512
ef46d5fe11ca1e3047da19b98032a52b479b8c54b58fdb58cf966bc6a5f44618f74e0059d43bef302e9326b26fd03c6c316b28b35b7526cc317a4430e15b7b0e
-
SSDEEP
24576:XlC6agTjA09bGeETsqjnhMgeiCl7G0nehbGZpbD:w6/T5Se8Dmg27RnWGj
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-20_d7cbc10957f26b880d5e6d5aa82d7c99_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-20_d7cbc10957f26b880d5e6d5aa82d7c99_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.0MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.0MB