Analysis

  • max time kernel
    78s
  • max time network
    122s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13-06-2024 10:06

General

  • Target

    2024-06-13_aae3a01be6fa7800f4d87590f7ec3550_ryuk.exe

  • Size

    2.1MB

  • MD5

    aae3a01be6fa7800f4d87590f7ec3550

  • SHA1

    16aa49f5db2997cb50ef54d44c08647cb74f0e9e

  • SHA256

    50bf7d1f9e270f265969fabf3a2e8edf865431b0f0e1807f99c3dca88118ce95

  • SHA512

    4f6a0952b9ac80c474b04a763fb3bd76128a82eb85cfda34caeac997d325d6261122beecafbbf0c7173bf0878b2483a446b505fb1f3c7c3dc8d23ea964690076

  • SSDEEP

    49152:TjFX33t4INlfTqkUMLu/52bulcI1wXZTBz5mgDUYmvFur31yAipQCtXxc0H:T7fTqmeX1+U7dG1yfpVBlH

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-06-13_aae3a01be6fa7800f4d87590f7ec3550_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-06-13_aae3a01be6fa7800f4d87590f7ec3550_ryuk.exe"
    1⤵
      PID:4172

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4172-6-0x00000000001A0000-0x0000000000200000-memory.dmp

      Filesize

      384KB

    • memory/4172-0-0x00000000001A0000-0x0000000000200000-memory.dmp

      Filesize

      384KB

    • memory/4172-11-0x0000000140000000-0x000000014022B000-memory.dmp

      Filesize

      2.2MB

    • memory/4172-10-0x00000000001A0000-0x0000000000200000-memory.dmp

      Filesize

      384KB

    • memory/4172-12-0x0000000140000000-0x000000014022B000-memory.dmp

      Filesize

      2.2MB