Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
25/04/2024, 15:34
General
-
Target
2024-04-25_c75ca0b9a0f0ce3042f5f15e71209bcd_ryuk.exe
-
Size
1.4MB
-
MD5
c75ca0b9a0f0ce3042f5f15e71209bcd
-
SHA1
aaf73910312dd55a5c1fc84945c291b6d245f188
-
SHA256
ada59df4b6497eaf5365945cc6ec4fc0a8bcaf0ddbcc43c4a4ba7d02e07cebf7
-
SHA512
bea0272005d7ceaec5fd94fcbbc97c97c47f749f20821377a57f2e246f0a57ca250e098239fbbf9cb79bbaaa92414a438c652680e80500e2b306e3d3c6b5cbcd
-
SSDEEP
24576:TPsJcuiT+L6VMRCPU6CENltmVVdpx7fLrQWd:Twcuf6ZU6CENlc7dpJLrQWd
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-25_c75ca0b9a0f0ce3042f5f15e71209bcd_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-25_c75ca0b9a0f0ce3042f5f15e71209bcd_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
2.0MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.0MB