Analysis
-
max time kernel
133s -
max time network
105s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
31-05-2024 19:30
General
-
Target
2024-05-31_52ec605749ac6860ae6b8b309b7e1476_ryuk.exe
-
Size
1.7MB
-
MD5
52ec605749ac6860ae6b8b309b7e1476
-
SHA1
11b5f21d94be5968ab85bd2862d604f05de7e002
-
SHA256
38f7e41fd0644c87490988cd6e0ed018ff70d9721e5d772ff872abab7a54d88f
-
SHA512
d84fd5eae720bf586118dbe6774f694b16cc42f2dc17abb01b6428d365a96afc6b3235b7421e347e7387c298b87b993509aabf988bb56f32fd64ca4172c55304
-
SSDEEP
24576:g6V6vC/AyqGizWCaFbyaxNQgAAvOAd40eaC1k:g6cFGizWCaFbtxu5AvOAze8
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-31_52ec605749ac6860ae6b8b309b7e1476_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-31_52ec605749ac6860ae6b8b309b7e1476_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.7MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.7MB