Analysis
-
max time kernel
138s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
22-05-2024 02:39
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2024-05-22_e935dac4d95ecafed831f166063895fa_ryuk.exe
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-05-22_e935dac4d95ecafed831f166063895fa_ryuk.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
2024-05-22_e935dac4d95ecafed831f166063895fa_ryuk.exe
-
Size
2.5MB
-
MD5
e935dac4d95ecafed831f166063895fa
-
SHA1
11f35530b9d057d9830fe9b49787bd14f667638d
-
SHA256
f2612ad7aa045e4451579ab1022da5c090d854c420a1dd9823f47f7a897fcf8d
-
SHA512
dcf87d449e73dde5f1f9e888920b7e7416f4d861596f5d9cc7bed740a368e3f10ef939f6b79f6a86425849d2331164b8d7c66d02a461e62c3a53563828af5513
-
SSDEEP
49152:7Br4i7zZrMH13cedt3eymKWucDABREb02q8LH7XKMU:Gi5pez3eZcEb0F8LHWt
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-22_e935dac4d95ecafed831f166063895fa_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-22_e935dac4d95ecafed831f166063895fa_ryuk.exe"1⤵
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4120,i,11266875042087428226,16669718873272757238,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:81⤵