Analysis
-
max time kernel
134s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
24/08/2024, 17:46
General
-
Target
2024-08-24_aea7e53c96efbd7073cbab8d67ee957a_ryuk.exe
-
Size
1.6MB
-
MD5
aea7e53c96efbd7073cbab8d67ee957a
-
SHA1
007e88603795a4ef84484dff05987903f1140147
-
SHA256
3181d8339238f67e0759a6c4a38e11061abace194fa901ab041b1548d7abea12
-
SHA512
e6267def9b82cd07ab2c87297b73338735259830bfc7cc2d5a41908113533e607fe68bf0a7cea858566efb10df98f3a51471c58512890b810c5089ba7a198cb3
-
SSDEEP
12288:B1MKv6gcgZwdrMqMcH6UD9E7//y6UDmL01JcWnkGOjnbzZjRkcLXMK8xUl2sMRN8:BmG+pdQJe1D90ZL+ZOjnZ1rgK+q2FV
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-08-24_aea7e53c96efbd7073cbab8d67ee957a_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-08-24_aea7e53c96efbd7073cbab8d67ee957a_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.3MB