Analysis
-
max time kernel
53s -
max time network
63s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
04/07/2024, 21:25
General
-
Target
2024-07-04_a3ac3c9ecb8dc135122c7ce2dde32512_ryuk.exe
-
Size
1.5MB
-
MD5
a3ac3c9ecb8dc135122c7ce2dde32512
-
SHA1
10bad5aa7e76c6496a7220ccef2302ee9130ccb3
-
SHA256
0a1897460a1aa35167d9155cd5be2202c5e89c18f8999883aeae49d2d8f5d9d7
-
SHA512
90a2315a9a23c9c708e42147e38922e5c04dedd88ec1b3c6e0b03050d8297e3106758d0c9ded65d610eefa88828d5920e9c5934c5118bc64d6e4dc55c8759903
-
SSDEEP
12288:1ObfA4LWO+vAYFT5Xc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9L:ybLBUT5sqjnhMgeiCl7G0nehbGZpbD
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-07-04_a3ac3c9ecb8dc135122c7ce2dde32512_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-07-04_a3ac3c9ecb8dc135122c7ce2dde32512_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.3MB