Analysis
-
max time kernel
92s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
-
submitted
07-07-2024 09:29
General
-
Target
2024-07-07_3b467c0b5beee4d301fa830acd152574_ryuk.exe
-
Size
2.0MB
-
MD5
3b467c0b5beee4d301fa830acd152574
-
SHA1
41f5c7f85e6562ba35b3d7c34eb909a3262dc4f9
-
SHA256
bc34d7f4d7483a48812b8dea36437d2e9a35fd064a6146a53ece0340895c95d6
-
SHA512
5379950f7f91e7ddf1f8756078ca84f28066824cfbc409c2fbe82cbeaa34bbce92ff1e7b39e750b4ca5757d008892a43f5337e19067f65dae6448da4c29e0dc3
-
SSDEEP
49152:fJDH92yo4VrRHYlArPlrl/ohdTUzlDmg27RnWGj:5O4VFFND527BWG
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-07-07_3b467c0b5beee4d301fa830acd152574_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-07-07_3b467c0b5beee4d301fa830acd152574_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.1MB