Analysis

  • max time kernel
    13s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    29/08/2024, 15:37

General

  • Target

    2024-08-29_f8b6d28e0c9ccb200ba78595be619b82_ryuk.exe

  • Size

    2.6MB

  • MD5

    f8b6d28e0c9ccb200ba78595be619b82

  • SHA1

    b1a9018733b97047610904e16713dfd81075a264

  • SHA256

    c6b6eaf6bee8ef8da4a6f48ce00cc4971ee351363a75b148f4eb30ed34edd369

  • SHA512

    a0f1bb36c509c83c05a863ed7a67ce83484ae063b38946471a031d510f35ff7b708a27ab2719df1fedee61c11bb61bb5d050e0c62b7ef44c55326c302c8828e8

  • SSDEEP

    49152:bdZpxYT0shsbPtUd4wD0BUizLNiXicJFFRGNzj3:8UtZBZ7wRGpj3

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-08-29_f8b6d28e0c9ccb200ba78595be619b82_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-08-29_f8b6d28e0c9ccb200ba78595be619b82_ryuk.exe"
    1⤵
      PID:2552

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/2552-0-0x0000000140000000-0x00000001402C5000-memory.dmp

            Filesize

            2.8MB

          • memory/2552-1-0x0000000000200000-0x0000000000260000-memory.dmp

            Filesize

            384KB

          • memory/2552-7-0x0000000000200000-0x0000000000260000-memory.dmp

            Filesize

            384KB

          • memory/2552-12-0x0000000000200000-0x0000000000260000-memory.dmp

            Filesize

            384KB

          • memory/2552-13-0x0000000140000000-0x00000001402C5000-memory.dmp

            Filesize

            2.8MB