Analysis
-
max time kernel
136s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
22/04/2024, 12:57
General
-
Target
2024-04-22_5a097c2b399c1d83adb947ba994f165b_ryuk.exe
-
Size
2.2MB
-
MD5
5a097c2b399c1d83adb947ba994f165b
-
SHA1
3f5fd091d70ce4b0b45bfdee3c579042d8633ead
-
SHA256
c1a2b34572e9e53961eac9aecdf0464a0d06259082fcd0add30325905affbc77
-
SHA512
8d2b44f50dfd08ff6a554b822c1fe1fd35f952fb41998fc73f2d8ac011b9a3011fa30c6c033420a3e62355db66e4c515c67578c593f4422c8fa7e519f47463d6
-
SSDEEP
49152:pNl7soq7sQCc1kyG2xHywRfHIO2Ts4bvDOYjyJVJyNfyPtYuTt3eIM:ZD2311kaxp9qOYjQHiqPtXBeIM
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-22_5a097c2b399c1d83adb947ba994f165b_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-22_5a097c2b399c1d83adb947ba994f165b_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.3MB