Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    09/05/2024, 06:55

General

  • Target

    2024-05-09_768ab8e8887a4476cd2784581d803c59_ryuk.exe

  • Size

    1.7MB

  • MD5

    768ab8e8887a4476cd2784581d803c59

  • SHA1

    d97de89067a5cc38bf394643302b36bfccec05c9

  • SHA256

    202501ac544412e9582f77a4f397ededb597b9e9e4434ab9f9e717b1e2acb54e

  • SHA512

    2cf2f988140ec8ea15ba9c9607a4ee9e45c874f298f6e3060d1b755b7b7dd2d7916e3651db40d31b3f9488dcb707ee9fb8f926d247c6f6f8bc3e759d21e002d5

  • SSDEEP

    12288:iXDEAZzP/w24lh3ODk2vtPNJZ7D9p5zuldXnXf3auHbGqndVFbk:rANw243eDVv7DxAZquHPH9k

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-09_768ab8e8887a4476cd2784581d803c59_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-09_768ab8e8887a4476cd2784581d803c59_ryuk.exe"
    1⤵
      PID:4612

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/4612-8-0x0000000140000000-0x00000001401AF000-memory.dmp

            Filesize

            1.7MB

          • memory/4612-0-0x00000000034B0000-0x0000000003510000-memory.dmp

            Filesize

            384KB

          • memory/4612-9-0x00000000034B0000-0x0000000003510000-memory.dmp

            Filesize

            384KB

          • memory/4612-6-0x00000000034B0000-0x0000000003510000-memory.dmp

            Filesize

            384KB

          • memory/4612-12-0x0000000140000000-0x00000001401AF000-memory.dmp

            Filesize

            1.7MB