Analysis

  • max time kernel
    0s
  • platform
    windows7_x64
  • resource
    win7-20240215-en
  • resource tags

    arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
  • submitted
    30/04/2024, 16:27

Errors

Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2024-04-30_1c41d90e0e8e33489422e56e6f5b7e1a_ryuk.exe command="C:\Users\Admin\AppData\Local\Temp\2024-04-30_1c41d90e0e8e33489422e56e6f5b7e1a_ryuk.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.

General

  • Target

    2024-04-30_1c41d90e0e8e33489422e56e6f5b7e1a_ryuk.exe

  • Size

    1.5MB

  • MD5

    1c41d90e0e8e33489422e56e6f5b7e1a

  • SHA1

    afe21ab4ebc700bee484d965d13dabb36abcfc48

  • SHA256

    3fbee625714e7b8c0691e4867cef3315d2f6b511320286fa78bfcaec82f0a04b

  • SHA512

    42bb335a9bc5deb2e7b78478bf1b58b979dc38f3b6ba8c0de32e0cf1e4dadbf193e144c460107c3bf2f06c820c27391012739803a7c6af5d2e62b1f618b9482a

  • SSDEEP

    24576:fSt7iHrT0FzyT/wwNOKVTWhwFfgXDNHENyTaTed3bUz0:WYrQaNOKFWhwxgaNyTN4

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-04-30_1c41d90e0e8e33489422e56e6f5b7e1a_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-04-30_1c41d90e0e8e33489422e56e6f5b7e1a_ryuk.exe"
    1⤵
      PID:2028

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads