Analysis

  • max time kernel
    0s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/04/2024, 21:43

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2024-04-23_d57dc07c600006453dcb91e239cd66bd_ryuk.exe command="C:\Users\Admin\AppData\Local\Temp\2024-04-23_d57dc07c600006453dcb91e239cd66bd_ryuk.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.

General

  • Target

    2024-04-23_d57dc07c600006453dcb91e239cd66bd_ryuk.exe

  • Size

    3.4MB

  • MD5

    d57dc07c600006453dcb91e239cd66bd

  • SHA1

    4f66c54212a3fa6d0407e1adc08f7bbe52958cfd

  • SHA256

    d122c44ab866ba351a3e1bd8887d927f559ecf6bcbfbe151ff1d07ea033e2487

  • SHA512

    685a1b4f8565c75f38681baf6da3d4fda3a86de3882d46606f93c274abeb715d66227dfb896d62a10ee1db44acb06edeec5bddcdfa2712c47059d872a5aa9477

  • SSDEEP

    49152:rQ7ZAfYv5pXOhdlrWnPeQGFsj9lVnrfsL+LQ01EcIS6fLzZihEl+:vzdWPeuxjaSEBfr+

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-04-23_d57dc07c600006453dcb91e239cd66bd_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-04-23_d57dc07c600006453dcb91e239cd66bd_ryuk.exe"
    1⤵
      PID:372

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads