Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
05/06/2024, 02:53
General
-
Target
2024-06-05_23505803de4ead52881ab0b1329b6644_ryuk.exe
-
Size
3.1MB
-
MD5
23505803de4ead52881ab0b1329b6644
-
SHA1
ce21146bc084384747559cc3b09c65f1c18350e4
-
SHA256
dc78c35c346e6e4f467b94377cdf8482c2557cbf46b8d8f1f58b489364f99236
-
SHA512
563e2ced199add241e1e6c67ceed0aef43df27bd3e22b45f1df0b0217c5eea13e9498ed4cec1914412965aa811e7c24925d04a40cda7a69b2eae213e278b7c3b
-
SSDEEP
49152:kuXBBl8txcIaxA8PlC7dAbhFY6SDP5wMiiiiiiiiiiiiiiiiiiiiiiiiii4j+ldC:k+umGebhE6UIPl1
Score
6/10
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-05_23505803de4ead52881ab0b1329b6644_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-05_23505803de4ead52881ab0b1329b6644_ryuk.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.3MB
-
Filesize
384KB
-
Filesize
3.3MB
-
Filesize
384KB
-
Filesize
384KB