Analysis
- max time kernel
145s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
30/05/2024, 01:44
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-30_5008fa0eb077ffde84414a4c178785d2_ryuk.exe
Resource
win7-20240508-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-05-30_5008fa0eb077ffde84414a4c178785d2_ryuk.exe
Resource
win10v2004-20240226-en
0 signatures
150 seconds
General
- Target 2024-05-30_5008fa0eb077ffde84414a4c178785d2_ryuk.exe
- Size 966KB
- Sample240530-b532hsba79
- SHA256 3e6be91be8347f9d777a90d47196fd09b0bbbd3fbf5060cbe99da627f5c68904
- MD5 5008fa0eb077ffde84414a4c178785d2
- SHA1 dfe4c733d1db06cbb74da0a0fed9f5b363b17d36
- SHA512 27714f9db09c8de2aaf4cb89e982998789e186c6181f58aa44b90fecca0cca135d7e5ea2a129df24232f766a7533237b4f3b14115fe53bd9bb97b53aae0df808
- SSDEEP 24576:gZ9/oX09zwSqLSMaHZ0CZy4BWIp9oYVhJvDX3CH9b:gfoA0azjyYVhFIb
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-30_5008fa0eb077ffde84414a4c178785d2_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-30_5008fa0eb077ffde84414a4c178785d2_ryuk.exe"1⤵PID:3404
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3968 --field-trial-handle=2256,i,6670388345726423024,18382795228658886258,262144 --variations-seed-version /prefetch:81⤵PID:1996