Analysis
-
max time kernel
149s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
29/05/2024, 18:08
General
-
Target
2024-05-29_8e1224de6e2f26ec74899893789caf65_ryuk.exe
-
Size
2.1MB
-
MD5
8e1224de6e2f26ec74899893789caf65
-
SHA1
11de1d59f5357f9e319eb1d3fcc692d3e8cca771
-
SHA256
9f8e2e82cc1a8806b12b7934422d7672787da3ed2f274cb191d8e4c3135851e8
-
SHA512
216448b3e4f23735b9f59e610dc14ebd534ecac74781199bb802c03e8afcdd661957f198bedd4f7ee339dde78a4bd98e4c0aa58c270ea67703ceede1f23c42dc
-
SSDEEP
49152:0a/3xXBSZ4K5MJ1LvTMxbfsYBYSgxu9+fw4T5cW+S8v:2Z4K5MJabfsYNk8
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-29_8e1224de6e2f26ec74899893789caf65_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-29_8e1224de6e2f26ec74899893789caf65_ryuk.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
384KB