Analysis

  • max time kernel
    94s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/05/2024, 21:08

General

  • Target

    2024-05-30_4ba7785f8c7fb9cc3b653cc2e4780fac_ryuk.exe

  • Size

    2.2MB

  • MD5

    4ba7785f8c7fb9cc3b653cc2e4780fac

  • SHA1

    4727bb77d79a6d3c68d5b4c367fe117c8d6c51b3

  • SHA256

    4fbe05414554bf3348191717c22825228a687420e7de06bec5a35b42d15a6e4d

  • SHA512

    f4afd365cefc621522aed6696d2738d11cddffd8bab1d6546c2f3df77f0e18be63421d1d0396efe26d72cd7b6daccac4ba8df0e0e7a272cc0b435bd0edc4ccbf

  • SSDEEP

    49152:nNl7soq7sQCc1kyG2xHywRfHIO2Ts4bvDzv65RjUV2Vo:HD2311kaxp9qzv65tUV

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-05-30_4ba7785f8c7fb9cc3b653cc2e4780fac_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-05-30_4ba7785f8c7fb9cc3b653cc2e4780fac_ryuk.exe"
    1⤵
      PID:1288

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1288-6-0x00000000020A0000-0x0000000002100000-memory.dmp

      Filesize

      384KB

    • memory/1288-9-0x00000000020A0000-0x0000000002100000-memory.dmp

      Filesize

      384KB

    • memory/1288-12-0x0000000140000000-0x0000000140247000-memory.dmp

      Filesize

      2.3MB

    • memory/1288-0-0x00000000020A0000-0x0000000002100000-memory.dmp

      Filesize

      384KB

    • memory/1288-8-0x0000000140000000-0x0000000140247000-memory.dmp

      Filesize

      2.3MB