Analysis

  • max time kernel
    133s
  • max time network
    101s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/06/2024, 18:06

General

  • Target

    2024-06-05_97d18e25c7e34eec88b05b9c81b40b89_ryuk.exe

  • Size

    1.5MB

  • MD5

    97d18e25c7e34eec88b05b9c81b40b89

  • SHA1

    6ac05c162adf9a9f7560ce66e569cc7d2ffc8c27

  • SHA256

    675e80ead5e70c9238540421cb29b3a28181aed30111a94f9c0f7a84d993a9ce

  • SHA512

    b96949c30c1c5cdb5d34d41496fb0e6e68323a0e8cb484f8f5b272fe58e2db701faac1c2016616090486df710e94e4ffd5b19f7b8a5f91a700ad01fc9066a7c9

  • SSDEEP

    24576:qTgnpwJ+RWTNjx+mZCkt76f/24pN+XNqNG6hditW:S0dWf9Ckt7c20+9qNxUW

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-06-05_97d18e25c7e34eec88b05b9c81b40b89_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-06-05_97d18e25c7e34eec88b05b9c81b40b89_ryuk.exe"
    1⤵
      PID:1240

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1240-6-0x0000000003590000-0x00000000035F0000-memory.dmp

      Filesize

      384KB

    • memory/1240-9-0x0000000003590000-0x00000000035F0000-memory.dmp

      Filesize

      384KB

    • memory/1240-8-0x0000000140000000-0x0000000140235000-memory.dmp

      Filesize

      2.2MB

    • memory/1240-1-0x0000000003590000-0x00000000035F0000-memory.dmp

      Filesize

      384KB