Analysis

  • max time kernel
    118s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    04-05-2024 12:28

General

  • Target

    2024-05-04_8cdc1bda49354746de609ba45e1ad287_ryuk.exe

  • Size

    1.8MB

  • MD5

    8cdc1bda49354746de609ba45e1ad287

  • SHA1

    2ad19501d1e67f830722bfe4c40e81e0793d1ab1

  • SHA256

    056fda2d368eae5675b046b35fd97d4b41bb37cd650eaad9142db70b1a290490

  • SHA512

    7c03e2aa5a1b78cf57add2e049dee78d4a746e3b3072e726eb1aa12b381bf8c4eba92ce08851aa805e4b40a93f23817aca061c5cc0e9ec1e2ca339ad6e6d5817

  • SSDEEP

    12288:6lLMLTZAXoUpkdJAdGyk+lCFcD1goThydrWUeB+QChZsrwbebPeVmfCUqVfZbdbl:BTmnpwJ+RkUOoTqy8QCYrLLeYKUML

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-04_8cdc1bda49354746de609ba45e1ad287_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-04_8cdc1bda49354746de609ba45e1ad287_ryuk.exe"
    1⤵
      PID:2860

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2860-0-0x00000000022D0000-0x0000000002330000-memory.dmp

      Filesize

      384KB

    • memory/2860-8-0x0000000140000000-0x00000001401D6000-memory.dmp

      Filesize

      1.8MB

    • memory/2860-9-0x00000000022D0000-0x0000000002330000-memory.dmp

      Filesize

      384KB

    • memory/2860-6-0x00000000022D0000-0x0000000002330000-memory.dmp

      Filesize

      384KB

    • memory/2860-12-0x0000000140000000-0x00000001401D6000-memory.dmp

      Filesize

      1.8MB