Analysis

  • max time kernel
    140s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29/04/2024, 18:57

General

  • Target

    2024-04-29_c17d76e48efb629faf5358878939b9bf_ryuk.exe

  • Size

    496KB

  • MD5

    c17d76e48efb629faf5358878939b9bf

  • SHA1

    9d32b0800b72c994215dc1c9ebe9e913c660b9a0

  • SHA256

    405e17a74db3e19018e0b5dd64bfbf471a999392b8f814182875cb7a435eef51

  • SHA512

    e378e5d740c63d297879cd96dd613f32203c7ca1fd55b24d2dcb1e25d2b3a8c9c33b119be960db570eb1d47c67f8ccc367bd8611b53a8b7c73bf6f24913f877a

  • SSDEEP

    12288:TgVHGtL4K+gfVcPSiYSXzk8PTKYj0L0qIGLFDyCOss:TeHQ4IdOjLzkIjbwCss

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-04-29_c17d76e48efb629faf5358878939b9bf_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-04-29_c17d76e48efb629faf5358878939b9bf_ryuk.exe"
    1⤵
      PID:4512

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/4512-0-0x00000177E6F70000-0x00000177E6FBC000-memory.dmp

            Filesize

            304KB

          • memory/4512-1-0x00007FFE08080000-0x00007FFE0810D000-memory.dmp

            Filesize

            564KB

          • memory/4512-2-0x00007FFE12FF0000-0x00007FFE131E5000-memory.dmp

            Filesize

            2.0MB

          • memory/4512-3-0x00007FFE08080000-0x00007FFE0810D000-memory.dmp

            Filesize

            564KB

          • memory/4512-4-0x00000177E6F90000-0x00000177E6F94000-memory.dmp

            Filesize

            16KB

          • memory/4512-5-0x00007FFE08080000-0x00007FFE0810D000-memory.dmp

            Filesize

            564KB

          • memory/4512-6-0x00007FFE12FF0000-0x00007FFE131E5000-memory.dmp

            Filesize

            2.0MB

          • memory/4512-9-0x00007FFE08080000-0x00007FFE0810D000-memory.dmp

            Filesize

            564KB

          • memory/4512-10-0x00007FFE08080000-0x00007FFE0810D000-memory.dmp

            Filesize

            564KB

          • memory/4512-12-0x00007FFE08080000-0x00007FFE0810D000-memory.dmp

            Filesize

            564KB

          • memory/4512-15-0x00007FFE08080000-0x00007FFE0810D000-memory.dmp

            Filesize

            564KB

          • memory/4512-16-0x00007FFE08080000-0x00007FFE0810D000-memory.dmp

            Filesize

            564KB

          • memory/4512-18-0x00007FFE08080000-0x00007FFE0810D000-memory.dmp

            Filesize

            564KB

          • memory/4512-19-0x00007FFE08080000-0x00007FFE0810D000-memory.dmp

            Filesize

            564KB

          • memory/4512-21-0x00007FFE08080000-0x00007FFE0810D000-memory.dmp

            Filesize

            564KB

          • memory/4512-22-0x00007FFE08080000-0x00007FFE0810D000-memory.dmp

            Filesize

            564KB