Analysis
-
max time kernel
143s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
30-04-2024 14:33
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2024-04-30_33b7a015d940c7fff8f4b412b72ff715_ryuk.exe
Resource
win7-20231129-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-04-30_33b7a015d940c7fff8f4b412b72ff715_ryuk.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
2024-04-30_33b7a015d940c7fff8f4b412b72ff715_ryuk.exe
-
Size
2.2MB
-
MD5
33b7a015d940c7fff8f4b412b72ff715
-
SHA1
83304c51211207c0237cb8caadbbdf54f2b2a241
-
SHA256
090f0cc290c5359e27eda6c07bd2d4d028ef0d38c564330127ff10021437ee05
-
SHA512
85221387d14299af6b793f391ae5a917f0f8d0e9a8f1c7ac0375a95a7952ea00c8459dde2d4869fec0431e015c226dc75bd55349edc8771254b227c22c5ee244
-
SSDEEP
49152:yNl7soq7sQCc1kyG2xHywRfHIO2Ts4bvDdiLlBUKubZrX+ld:2D2311kaxp9qdiBSTZL+ld
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-30_33b7a015d940c7fff8f4b412b72ff715_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-30_33b7a015d940c7fff8f4b412b72ff715_ryuk.exe"1⤵PID:1432
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1416 --field-trial-handle=3240,i,13319578961094268484,16557498665191861597,262144 --variations-seed-version /prefetch:81⤵PID:4744