Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22-05-2024 20:40

General

  • Target

    2024-05-22_ae939da627c3ff5140836d982d3c8e11_ryuk.exe

  • Size

    1.4MB

  • MD5

    ae939da627c3ff5140836d982d3c8e11

  • SHA1

    c47d82143fe186e095cdaf802cdc2fd8020cdf2d

  • SHA256

    079f06cca783d56b3d0c69f303bc791e984236c29257fc7b569e3c199446aac9

  • SHA512

    1b66caf826831f2e0b576d76900864af9ac8b48686f055f09aed33cb358d51451f3ebd71e2b80084f8b01779eb25e1a7e721b3292b2b50f9dc50cad9b323b8ea

  • SSDEEP

    12288:xXDCAZzP/w24lhS+Xq1gYgR+8DAoczI2ZfnwlQTePINayz+ByIne7xmmZjIUTSlb:QANw243TMdIuwe3zfIe7xmvH/

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-22_ae939da627c3ff5140836d982d3c8e11_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-22_ae939da627c3ff5140836d982d3c8e11_ryuk.exe"
    1⤵
      PID:1316

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1316-0-0x0000000002340000-0x00000000023A0000-memory.dmp
      Filesize

      384KB

    • memory/1316-9-0x0000000002340000-0x00000000023A0000-memory.dmp
      Filesize

      384KB

    • memory/1316-8-0x0000000140000000-0x000000014020E000-memory.dmp
      Filesize

      2.1MB

    • memory/1316-11-0x0000000002340000-0x00000000023A0000-memory.dmp
      Filesize

      384KB

    • memory/1316-12-0x0000000140000000-0x000000014020E000-memory.dmp
      Filesize

      2.1MB