Analysis

  • max time kernel
    117s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    30/04/2024, 10:02

General

  • Target

    2024-04-30_5a7257cf7628f0e2233ef09e27d9b2c5_ryuk.exe

  • Size

    5.5MB

  • MD5

    5a7257cf7628f0e2233ef09e27d9b2c5

  • SHA1

    0fb87a716b18038fed829d84c216726609188bc8

  • SHA256

    93401d0ed4055d2ba43a7d44da320c91724283be891c33d6b937a047535503ef

  • SHA512

    3053628a342e172bf212247206474ca1c574e5f23e1fec02ff970fcf0df66b3f26d5b42d7179489e14cf5c0055278930c710d6de803adb103badf66d6b7bef1c

  • SSDEEP

    49152:eEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfp:EAI5pAdVJn9tbnR1VgBVmkiBSTZL+ld

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-04-30_5a7257cf7628f0e2233ef09e27d9b2c5_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-04-30_5a7257cf7628f0e2233ef09e27d9b2c5_ryuk.exe"
    1⤵
      PID:2600

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2600-0-0x0000000140000000-0x0000000140592000-memory.dmp

      Filesize

      5.6MB