Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
-
submitted
07/05/2024, 04:44
General
-
Target
2024-05-07_0797f6d86d889cd9c12bd727d99d0b51_ryuk.exe
-
Size
2.3MB
-
MD5
0797f6d86d889cd9c12bd727d99d0b51
-
SHA1
3287c1231711fc3734f5a9fde716486a2796c7ba
-
SHA256
07ed65f9c4620664f5f5aa49a25eeb80f07ccf0041f39010f19ab815f52e2522
-
SHA512
d901a35bd737dc37ebb3b0c76ecc488eb467d11eab9ac51a441e057e6980ebe0d0747f8e03227c893c06e4ff84358c0a46d0edfdf2160c95612275e9912d8ba4
-
SSDEEP
49152:2osQHMmpQAaR824OnqDPqFmhlyjsrrJLp2lUEFP4+Po6kk:k4O2P5JLQlVt4ib
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-07_0797f6d86d889cd9c12bd727d99d0b51_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-07_0797f6d86d889cd9c12bd727d99d0b51_ryuk.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.3MB
-
Filesize
2.3MB