Analysis
-
max time kernel
134s -
max time network
103s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
29-05-2024 05:25
General
-
Target
2024-05-29_27d2d5424040166391e0d6fb2763d632_ryuk.exe
-
Size
2.1MB
-
MD5
27d2d5424040166391e0d6fb2763d632
-
SHA1
31d90b760381237b0d2e39e6176e71fddee37163
-
SHA256
095cc16df36f0ff599796f4b92402fe6849f2945e68db30d8f3ebb87b6a52407
-
SHA512
a328d72f79f020cdec04a0b4e03b944451de516a0532eff11b4fab1f291493d224e7f8cf7059338b62e89519a4f5c3d97883f011f37380c4e4e668e79a901b64
-
SSDEEP
49152:mjFX33t4INdfTqkUMLu/52bulcI1wXZTBz56aB0zj0yjoB2:mHfTqmeX1mB2Yyjl
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-29_27d2d5424040166391e0d6fb2763d632_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-29_27d2d5424040166391e0d6fb2763d632_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.2MB