Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    15/05/2024, 16:53

General

  • Target

    2024-05-15_d0f0d9b5aef80a46e2f2074ed8fea671_ryuk.exe

  • Size

    2.1MB

  • MD5

    d0f0d9b5aef80a46e2f2074ed8fea671

  • SHA1

    657b5572014f21f1c9a938f9d31f11b82d35f970

  • SHA256

    91236e5a3de4d199cc5a9ef0c7cb44a7916daa9a09f04adb5c23c7a64ff0f149

  • SHA512

    125b2cc8dc75b05a59dfa6f40c871d2b1a27e7f6db94cb907fe49ae7d1d553a3f7bf8e010969b78c19d17888db7ec3e18954d466ddd01c20ff82eaaf97b15eb8

  • SSDEEP

    49152:Ka/3xXBSZ4K5MJ1LvTMxbfsYBYSgxu9+fw4THDYf5zaCpXxPuR6E9dA:UZ4K5MJabfsYNgoDw/z

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-15_d0f0d9b5aef80a46e2f2074ed8fea671_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-15_d0f0d9b5aef80a46e2f2074ed8fea671_ryuk.exe"
    1⤵
      PID:1684

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/1684-0-0x00000000001F0000-0x0000000000250000-memory.dmp

            Filesize

            384KB

          • memory/1684-8-0x0000000140000000-0x0000000140237000-memory.dmp

            Filesize

            2.2MB

          • memory/1684-13-0x0000000140000000-0x0000000140237000-memory.dmp

            Filesize

            2.2MB

          • memory/1684-12-0x00000000001F0000-0x0000000000250000-memory.dmp

            Filesize

            384KB

          • memory/1684-9-0x00000000001F0000-0x0000000000250000-memory.dmp

            Filesize

            384KB