Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    21-04-2024 00:38

General

  • Target

    2024-04-21_881e7c902231cb77881a30b83b1be3bb_ryuk.exe

  • Size

    4.6MB

  • MD5

    881e7c902231cb77881a30b83b1be3bb

  • SHA1

    33f853bf5a94e8966ee07cc56fb8bd269851cb70

  • SHA256

    a475080d52302e7e9d6957a185864eeab34c93ee408b17feba4b9459c3e7ac8e

  • SHA512

    639d285dc91b3c450b75d90f5bf868dfb9301aabc45a8cfeaf29e15c385ac13a437ec29011bbb1ca93e2c75f16b1c4959cc36ed4f787e28aa36c0ba11abdfc3b

  • SSDEEP

    49152:n6xt7epvKbqZDMX1ABvAao5h+GjsY3ttrsJzRIq4RBTkV2XNuBDGuMrkOwbFE1dt:Y5sY3nsJzR8NfuBHD527BWG

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-04-21_881e7c902231cb77881a30b83b1be3bb_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-04-21_881e7c902231cb77881a30b83b1be3bb_ryuk.exe"
    1⤵
      PID:1888

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1888-0-0x0000000140000000-0x00000001404AC000-memory.dmp

      Filesize

      4.7MB