Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
11/05/2024, 11:50
General
-
Target
2024-05-11_cf3ed63747d7e23fed68dac39eb030f2_ryuk.exe
-
Size
1.5MB
-
MD5
cf3ed63747d7e23fed68dac39eb030f2
-
SHA1
3c0568618c41ae3523a03215da5e3b873ec3beb6
-
SHA256
379fb2545f93c8cbb0427c0c9cf2580c3276a4161b1ea0d956c9cbb040b77ad9
-
SHA512
79bf64bbfc6d07a4c6b813dee564a0c975073091f535bcc935791010c78b546e1e6858dfbd159b0abc6ee91b70c36fbdeea5173b86a37774a61232710c5b3c12
-
SSDEEP
24576:eTgnpwJ+RMsqjnhMgeiCl7G0nehbGZpbD:W0d4Dmg27RnWGj
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-11_cf3ed63747d7e23fed68dac39eb030f2_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-11_cf3ed63747d7e23fed68dac39eb030f2_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.2MB