Analysis

  • max time kernel
    13s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    14/08/2024, 19:01

General

  • Target

    2024-08-14_6b9d5790d19d73c37eb95713d23c3c26_ryuk.exe

  • Size

    1.5MB

  • MD5

    6b9d5790d19d73c37eb95713d23c3c26

  • SHA1

    41fb9b24b1fb73155f86afeaf6d27c604fd61789

  • SHA256

    ca5a25bbdecdba7046696b74617d615455e81332fbda83eeb9e12a6090913082

  • SHA512

    45304fc7c1b8ca93397ad238b4cd82765818c93c00c56068d33dc5a5a672c6aeca5bd196545d20b3d19185733ae02669a182b8aa56a2b639dd4deb25e603630f

  • SSDEEP

    24576:1dolRus94x4niLJ1nI6UZExNsqjnhMgeiCl7G0nehbGZpbD:1dolRuLx4niLJ+6UZIxDmg27RnWGj

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-08-14_6b9d5790d19d73c37eb95713d23c3c26_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-08-14_6b9d5790d19d73c37eb95713d23c3c26_ryuk.exe"
    1⤵
      PID:708

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/708-0-0x0000000000420000-0x0000000000480000-memory.dmp

            Filesize

            384KB

          • memory/708-10-0x0000000000420000-0x0000000000480000-memory.dmp

            Filesize

            384KB

          • memory/708-8-0x0000000140000000-0x000000014022B000-memory.dmp

            Filesize

            2.2MB

          • memory/708-9-0x0000000000420000-0x0000000000480000-memory.dmp

            Filesize

            384KB

          • memory/708-12-0x0000000140000000-0x000000014022B000-memory.dmp

            Filesize

            2.2MB