Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/05/2024, 20:55

General

  • Target

    2024-05-27_54c7078b7cf0bf157a1bb7fdc9bf4c97_ryuk.exe

  • Size

    1.4MB

  • MD5

    54c7078b7cf0bf157a1bb7fdc9bf4c97

  • SHA1

    68df820c6bb60a285b9235afcf1fff639a94cd69

  • SHA256

    766e3fc77984873a4315df78809264a6832838a5bb9b733b4c6b7c7890d4face

  • SHA512

    3638b8af3bd389dc22270321ad1cc1f24840bb2d4fce4910f0a57e35ecfe73b73f59da189de4bf1e209244d4fcb99d7b9f29020143debef399e64c9312d2c6c0

  • SSDEEP

    12288:uCCP9Q/JcuiNMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:cPsJcuiuSkQ/7Gb8NLEbeZ

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-27_54c7078b7cf0bf157a1bb7fdc9bf4c97_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-27_54c7078b7cf0bf157a1bb7fdc9bf4c97_ryuk.exe"
    1⤵
      PID:2660

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/2660-6-0x0000000000C00000-0x0000000000C60000-memory.dmp

            Filesize

            384KB

          • memory/2660-9-0x0000000000C00000-0x0000000000C60000-memory.dmp

            Filesize

            384KB

          • memory/2660-8-0x0000000140000000-0x0000000140161000-memory.dmp

            Filesize

            1.4MB

          • memory/2660-1-0x0000000000C00000-0x0000000000C60000-memory.dmp

            Filesize

            384KB