Analysis
-
max time kernel
147s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
12/06/2024, 17:07
General
-
Target
2024-06-12_80b7e96ef74b630a5f4dc184000b4484_ryuk.exe
-
Size
2.1MB
-
MD5
80b7e96ef74b630a5f4dc184000b4484
-
SHA1
6c71862f6aa0cb68135742398934e346a3eac098
-
SHA256
b81c7e80ad37348ca0128bd095b9889f232410163079f90e2b70df5542e9e31a
-
SHA512
b86ab1f152d95afafb72d4d9863bfe58ad62f14bba9c469c5fa06fa0eaf8bc209593b3e1ae8c0932ec8368b77fb51b94125539f3298496b840d80005f39edcc1
-
SSDEEP
49152:ja/3xXBSZ4K5MJ1LvTMxbfsYBYSgxu9+fw4TGiLlBUKubZrX+ld:zZ4K5MJabfsYN9iBSTZL+ld
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-12_80b7e96ef74b630a5f4dc184000b4484_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-12_80b7e96ef74b630a5f4dc184000b4484_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
384KB