Analysis

  • max time kernel
    119s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    14/05/2024, 17:50

General

  • Target

    2024-05-14_27d0ceed3148e6a4d6057f1d4ca34891_ryuk.exe

  • Size

    2.2MB

  • MD5

    27d0ceed3148e6a4d6057f1d4ca34891

  • SHA1

    e323d633b60de50fad37c9f22bc9909c796eb048

  • SHA256

    e393a8344cfb75e2b8c36003988590a40c8693d334f726d289abbd53372d3e5d

  • SHA512

    7c785c1fea9ab8918113a74663fae2d56c29b336ce37264f6bb1f89834c8bd255ec9547c3652a7188d8c2433824c1268abad0a1cad98a932a35198314cf14a7d

  • SSDEEP

    24576:DOObVw4TaN1wdkukCba4oXtgLhU3wEdmh585TduSZpUR0GHrVQ1aW4mSOgv3isi:DOOh3aN4kuLbegmtGUpAHrVQ1/fSNvi

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-14_27d0ceed3148e6a4d6057f1d4ca34891_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-14_27d0ceed3148e6a4d6057f1d4ca34891_ryuk.exe"
    1⤵
      PID:1232

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1232-0-0x0000000140000000-0x0000000140248000-memory.dmp

      Filesize

      2.3MB