Analysis

  • max time kernel
    93s
  • max time network
    94s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/05/2024, 04:24

General

  • Target

    2024-05-25_199bb96d9f6040c1a4bde0b9b84b83ab_ryuk.exe

  • Size

    2.1MB

  • MD5

    199bb96d9f6040c1a4bde0b9b84b83ab

  • SHA1

    e7a0ef03693987c280df53c292bbee35474d7d32

  • SHA256

    7e05444ea3ae34f822efa8a6ba0b9d987bde472ca3bacbb635cce53c50dfb312

  • SHA512

    8618a7b7b9d97a9f1798896e13f00289e6951c952612edcdaa205337d6fe2b26d463df0a2660a037b0c56fc11628428bbc7aac28b1da9228eb57102207992f79

  • SSDEEP

    49152:KjFX33t4INlfTqkUMLu/52bulcI1wXZTBz5pgDUYmvFur31yAipQCtXxc0H:K7fTqmeX1lU7dG1yfpVBlH

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-25_199bb96d9f6040c1a4bde0b9b84b83ab_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-25_199bb96d9f6040c1a4bde0b9b84b83ab_ryuk.exe"
    1⤵
      PID:2748

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/2748-0-0x00000000001A0000-0x0000000000200000-memory.dmp

            Filesize

            384KB

          • memory/2748-6-0x00000000001A0000-0x0000000000200000-memory.dmp

            Filesize

            384KB

          • memory/2748-12-0x0000000140000000-0x000000014022B000-memory.dmp

            Filesize

            2.2MB

          • memory/2748-9-0x00000000001A0000-0x0000000000200000-memory.dmp

            Filesize

            384KB

          • memory/2748-8-0x0000000140000000-0x000000014022B000-memory.dmp

            Filesize

            2.2MB