Analysis
-
max time kernel
93s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
25-05-2024 23:28
General
-
Target
2024-05-25_c4c7f75dedebb3cc6cc435c048539802_ryuk.exe
-
Size
2.2MB
-
MD5
c4c7f75dedebb3cc6cc435c048539802
-
SHA1
8c50725b79fd2b0394d6f5ae06684d228e2847a9
-
SHA256
56a4db8c134a82eb791661f6fec370d4af66532d5c44facf673d3eab9b99cd9c
-
SHA512
92574d4465900abd9e945f15776992c9bf40b31f29b8a3e8ccf116565fe6636a92b1a1b7c2f9ed74655292e8f5de4248db665f5970613972aad3d9ef7754ae95
-
SSDEEP
49152:3Nl7soq7sQCc1kyG2xHywRfHIO2Ts4bvD8isGcnlQHPxi:3D2311kaxp9qQnlS
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-25_c4c7f75dedebb3cc6cc435c048539802_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-25_c4c7f75dedebb3cc6cc435c048539802_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.3MB
-
Filesize
2.3MB