Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
11-05-2024 11:45
General
-
Target
2024-05-11_0460cf69b6c622e5eb9bd996411ff130_ryuk.exe
-
Size
1.7MB
-
MD5
0460cf69b6c622e5eb9bd996411ff130
-
SHA1
9a71a0744f2d1732e9dd8ff40acc2a8bb0958875
-
SHA256
7a3a4f8c8e18d2b721a49fe0342f977b26ae836c8aa00d099859497eb0a14ce1
-
SHA512
8b5d0eeca7ffff4c8c415bd753a291f0061725ff95c057c35cdb92cd9fd0a4889f70a410be5af2b19c027ee335460b3cc8aea6e6ea15d8bd7dfd918666d2be59
-
SSDEEP
49152:D6cMGizWCaFb9RVlbnXf9gPTTW7H1GXC:uG5CaFb9RVlbnP9WXW7H6C
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-11_0460cf69b6c622e5eb9bd996411ff130_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-11_0460cf69b6c622e5eb9bd996411ff130_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.7MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.7MB