Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    25/04/2024, 03:52

General

  • Target

    2024-04-25_89434b9cdc28673e85f2cd0c5ca1a536_ryuk.exe

  • Size

    2.0MB

  • MD5

    89434b9cdc28673e85f2cd0c5ca1a536

  • SHA1

    bc26606fa7ddbf456f6cdce5f35368771df2305c

  • SHA256

    895e4569cdb653d6d151d5aef716c8bb73b30f1f945dc12be678882929ea656e

  • SHA512

    4347f91639674ca2dd5cf37e7498fb6538d7add68a04620f89685589a79318da41e08a765d1367a0540c1edd3272ecda6ac67ea906282faad93d15aa2800443c

  • SSDEEP

    49152:V1SpUNEHAtai3f27bfbx5Wf1R6bJ11DTKDcCyDmg27RnWGj:mi3f27jbhvD527BWG

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-04-25_89434b9cdc28673e85f2cd0c5ca1a536_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-04-25_89434b9cdc28673e85f2cd0c5ca1a536_ryuk.exe"
    1⤵
      PID:1952

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/1952-0-0x00000000001E0000-0x0000000000240000-memory.dmp

            Filesize

            384KB

          • memory/1952-1-0x0000000140000000-0x000000014020A000-memory.dmp

            Filesize

            2.0MB

          • memory/1952-10-0x00000000001E0000-0x0000000000240000-memory.dmp

            Filesize

            384KB

          • memory/1952-8-0x00000000001E0000-0x0000000000240000-memory.dmp

            Filesize

            384KB

          • memory/1952-12-0x0000000140000000-0x000000014020A000-memory.dmp

            Filesize

            2.0MB