Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
24-04-2024 05:25
General
-
Target
2024-04-24_05770462e446ad45aa6751a821310ded_ryuk.exe
-
Size
2.1MB
-
MD5
05770462e446ad45aa6751a821310ded
-
SHA1
15f892d6adc4c81450dae5976235bdc624806688
-
SHA256
d56f8d6568c0f024b9a6c22971df93b3e91e02601f01743a37a6ef55ad15ca97
-
SHA512
4d4069920de0ec25a981a58fcc6c86265569883cb35315a39400111418f0d97011030c715bf3e525e9bcdd735f695229b332a00b394406912ba2837596ff8f75
-
SSDEEP
49152:ba/3xXBSZ4K5MJ1LvTMxbfsYBYSgxu9+fw4ThkQ/qoLEw:rZ4K5MJabfsYNmqo4w
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-24_05770462e446ad45aa6751a821310ded_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-24_05770462e446ad45aa6751a821310ded_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.2MB