Overview

overview

7

Static

static

3

2024-06-07...uk.exe

windows7-x64

7

2024-06-07...uk.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    92s
  • max time network
    94s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    07/06/2024, 08:52

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2024-06-07_5637038147fe5db15644c0c80aba5b6a_lazagne_ryuk.exe
  • Size 6.3MB
  • Sample240607-ksxteaeh45
  • SHA256 c9a0a98ef0d872d392d58581ed1371f10adc0693371deff0766ed30e39d12604
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 11 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-06-07_5637038147fe5db15644c0c80aba5b6a_lazagne_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-06-07_5637038147fe5db15644c0c80aba5b6a_lazagne_ryuk.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4352
    • C:\Users\Admin\AppData\Local\Temp\2024-06-07_5637038147fe5db15644c0c80aba5b6a_lazagne_ryuk.exe
      "C:\Users\Admin\AppData\Local\Temp\2024-06-07_5637038147fe5db15644c0c80aba5b6a_lazagne_ryuk.exe"
      2⤵
      • Loads dropped DLL
      PID:3352

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        _elementtree.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43522\_elementtree.pyd
        • Size 183KB
        • SHA256 425341f9b08a8d1683a9d88dcd820acfe9e88612d4666cf9d2421315a592e74e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _hashlib.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43522\_hashlib.pyd
        • Size 1.6MB
        • SHA256 4c5af12ecd203ea45e2aec5ce9b4b862636a3b9a6057ce0d5d8cce0ee37ec3a9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _multiprocessing.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43522\_multiprocessing.pyd
        • Size 34KB
        • SHA256 d384e6a309c41031921fac5358b99a37e4768681d882de3e66d20179bde623cf
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43522\_socket.pyd
        • Size 49KB
        • SHA256 7ddf74ac35a6dfa24c4f96acd058829fc934b798af910ed2a58d9b8ef8a26511
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _sqlite3.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43522\_sqlite3.pyd
        • Size 62KB
        • SHA256 43092954458ad5d6e6cd2c8fd5d917d09a66e8976b0ba3225cda48d60465e179
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43522\bz2.pyd
        • Size 90KB
        • SHA256 baa75ad550784c5c5bada51cb565784a04f267fad708e6611b0cc3dc6ae0c1ed
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        lazagne.exe.manifest
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43522\lazagne.exe.manifest
        • Size 1012B
        • SHA256 4127ecf092bc603470ef5ad84159c45bc15d341cdfb95ff314b7792bbe471930
        • MD5 SHA1 SHA512
        Submit Download

        pyexpat.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43522\pyexpat.pyd
        • Size 182KB
        • SHA256 a2fd7ffced225de673f815374903500921baa1ff2b13a5de1dc35b53e457b964
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        python27.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43522\python27.dll
        • Size 3.3MB
        • SHA256 43e8c9b6c1403b4622de9c9bff75542803a674909d44aba26cf11828fd0a5ed0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43~1\_ctypes.pyd
        • Size 119KB
        • SHA256 6f450435edb2b78504f166044aa45e87cd19670789dfacdb1074db7f934ab2a6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        _ssl.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43~1\_ssl.pyd
        • Size 2.0MB
        • SHA256 a9d0fdc952d5bb1ba7f809a6fa7ba9418414d5a10f4a7d429f680eac22d6a322
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        sqlite3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI43~1\sqlite3.dll
        • Size 784KB
        • SHA256 9bdab17d9ee7c7ed2bd7cf06e2342a4661ab1cc43c0d6cdac708c7e13c329561
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download