Analysis

  • max time kernel
    117s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    01/06/2024, 18:05

General

  • Target

    2024-06-01_856a13ffdedc7f489699180cd9b28e99_ryuk.exe

  • Size

    1.5MB

  • MD5

    856a13ffdedc7f489699180cd9b28e99

  • SHA1

    3a0616838ede2a30e3253f715fb88599ac0ed617

  • SHA256

    1bf80ee374c1860911930662cafc270c02b64012d4c3a58107d81f7abb09be8a

  • SHA512

    7121b36a3c6cd131e4c77a682c3e047726d9b343a1dd04f721f24976fe4164d740204b44b40b331a53d87b2fd6acd297aae96779c96b64bb940b25bcae187b12

  • SSDEEP

    12288:JlLMLT1AXoUpkdJAdGyWMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:0TCnpwJ+RDSkQ/7Gb8NLEbeZ

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-06-01_856a13ffdedc7f489699180cd9b28e99_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-06-01_856a13ffdedc7f489699180cd9b28e99_ryuk.exe"
    1⤵
      PID:2888

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2888-0-0x00000000008E0000-0x0000000000940000-memory.dmp

      Filesize

      384KB

    • memory/2888-6-0x0000000140000000-0x000000014018D000-memory.dmp

      Filesize

      1.6MB

    • memory/2888-8-0x00000000008E0000-0x0000000000940000-memory.dmp

      Filesize

      384KB

    • memory/2888-7-0x00000000008E0000-0x0000000000940000-memory.dmp

      Filesize

      384KB

    • memory/2888-13-0x0000000140000000-0x000000014018D000-memory.dmp

      Filesize

      1.6MB

    • memory/2888-12-0x00000000008E0000-0x0000000000940000-memory.dmp

      Filesize

      384KB