Analysis

  • max time kernel
    136s
  • max time network
    148s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240419-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/05/2024, 01:07

General

  • Target

    2024-05-02_ba875bf3045e34f5ceb860342975820e_ryuk.exe

  • Size

    1.3MB

  • MD5

    ba875bf3045e34f5ceb860342975820e

  • SHA1

    d0c558e319ef65de7122bfa760810c8059035b3a

  • SHA256

    d7dcb912d37a7a576c54558752541d8654037093612c96521558fd9b771a7404

  • SHA512

    3497f6fcea492ef1533cf60c5e92302e78653f6fc0cce12f9cdde5d0889cd126be35d3ad6ca1005525cadbf2c1a971348428b4caf9af52bd847a12739d1e3c6b

  • SSDEEP

    24576:SPsJcuijRVldlnXfH9gPwCn7vOb7HHcp/CGXQp:SwcuGRVlbnXf9gPTTW7H1GXC

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-02_ba875bf3045e34f5ceb860342975820e_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-02_ba875bf3045e34f5ceb860342975820e_ryuk.exe"
    1⤵
      PID:3772

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3772-6-0x0000000003590000-0x00000000035F0000-memory.dmp

      Filesize

      384KB

    • memory/3772-8-0x0000000140000000-0x0000000140159000-memory.dmp

      Filesize

      1.3MB

    • memory/3772-9-0x00007FFAA4F90000-0x00007FFAA5259000-memory.dmp

      Filesize

      2.8MB

    • memory/3772-10-0x0000000003590000-0x00000000035F0000-memory.dmp

      Filesize

      384KB

    • memory/3772-12-0x0000000140000000-0x0000000140159000-memory.dmp

      Filesize

      1.3MB

    • memory/3772-1-0x0000000003590000-0x00000000035F0000-memory.dmp

      Filesize

      384KB