Analysis

  • max time kernel
    67s
  • max time network
    54s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01-05-2024 07:27

General

  • Target

    2024-05-01_e6133f84e0d6ed8c97dc859d620dc7cb_ryuk.exe

  • Size

    2.1MB

  • MD5

    e6133f84e0d6ed8c97dc859d620dc7cb

  • SHA1

    04f2a4c9d264b5c51d983195108e85d0291ca743

  • SHA256

    8b9368ba922a6b3981bb55e1e8e691bb5aa8afbfef524aed79706d140d869b43

  • SHA512

    66f6da2b7928cb4e18edc2f097fc31050854bce4824ace4b153eb123a09619622602dc6c9380fc9718444218a60a62176538b49d1afb57ae68d82e5733f69272

  • SSDEEP

    49152:6a/3xXBSZ4K5MJ1LvTMxbfsYBYSgxu9+fw4T0blI7a8K2mFhbrr:kZ4K5MJabfsYNvlI7K2mF9

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-01_e6133f84e0d6ed8c97dc859d620dc7cb_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-01_e6133f84e0d6ed8c97dc859d620dc7cb_ryuk.exe"
    1⤵
      PID:1248

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1248-0-0x0000000140000000-0x0000000140237000-memory.dmp

      Filesize

      2.2MB

    • memory/1248-7-0x00000000020E0000-0x0000000002140000-memory.dmp

      Filesize

      384KB

    • memory/1248-9-0x00000000020E0000-0x0000000002140000-memory.dmp

      Filesize

      384KB

    • memory/1248-1-0x00000000020E0000-0x0000000002140000-memory.dmp

      Filesize

      384KB

    • memory/1248-11-0x0000000140000000-0x0000000140237000-memory.dmp

      Filesize

      2.2MB