Analysis

  • max time kernel
    134s
  • max time network
    102s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/06/2024, 10:31

General

  • Target

    2024-06-05_6fb0b24ada371c4e7adaf54c9728a6c8_ryuk.exe

  • Size

    1.7MB

  • MD5

    6fb0b24ada371c4e7adaf54c9728a6c8

  • SHA1

    4527054c1587545cceef465e1eb02a65992aa8a4

  • SHA256

    0c03a08d5578d511fcd26784a5a601fb6c38b35c9a70871d792fc9a3971deec5

  • SHA512

    11d95b0a35129e8dd32383b3685f80d092fb808724eea896f989fb579eb1e355d8211a8bd12280e06db1a4539c6f08b18ca97920c0eaa6b3f9eaa2830d939de4

  • SSDEEP

    24576:uTgnpwJ+RYCks7WE9F5pwg8zmdqQjC60jiHkU:m0dYCks7R9L58UqFJjskU

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-06-05_6fb0b24ada371c4e7adaf54c9728a6c8_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-06-05_6fb0b24ada371c4e7adaf54c9728a6c8_ryuk.exe"
    1⤵
      PID:928

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/928-0-0x00000000035F0000-0x0000000003650000-memory.dmp

            Filesize

            384KB

          • memory/928-6-0x00000000035F0000-0x0000000003650000-memory.dmp

            Filesize

            384KB

          • memory/928-10-0x00000000035F0000-0x0000000003650000-memory.dmp

            Filesize

            384KB

          • memory/928-11-0x0000000140000000-0x000000014028B000-memory.dmp

            Filesize

            2.5MB

          • memory/928-12-0x0000000140000000-0x000000014028B000-memory.dmp

            Filesize

            2.5MB