Analysis
-
max time kernel
93s -
max time network
108s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
-
submitted
08/07/2024, 16:23
General
-
Target
2024-07-08_6d046fd998031ea0923f15b058bd70dc_ryuk.exe
-
Size
1.5MB
-
MD5
6d046fd998031ea0923f15b058bd70dc
-
SHA1
06c514ea82bae1223f5a955cd5ff43f897ddb334
-
SHA256
30dbe23342ad73b8f1c557e9739cf01512561a1539b0fb166201968ada449488
-
SHA512
5d8d147f077e006d859ea1141ad0b53304f0f2cf7bf45259d67a82acc731c0a9f02640f035372f8983154180672b635d473dc18b75a9ede38ea95ca431083aab
-
SSDEEP
12288:jObfA4LWOsvAYFTyxqTSgZG5GnWMBUKZGYaJ08vTZLfX+PdgdnW:MbL3UTyxVirnlBUKZ408vTZrX+lgdW
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-07-08_6d046fd998031ea0923f15b058bd70dc_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-07-08_6d046fd998031ea0923f15b058bd70dc_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.3MB