Analysis
-
max time kernel
135s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
03/10/2024, 18:33
General
-
Target
2024-10-03_31a83ede8a5458de45860c24112f11d8_ryuk.exe
-
Size
1.5MB
-
MD5
31a83ede8a5458de45860c24112f11d8
-
SHA1
327e2a826775d1bf2a9598d733e6d4d4024aef65
-
SHA256
1c16bbb7c1af059c30194212656462e90535efe7018e406256db1727af8598a9
-
SHA512
31b333fa6c26d87b04416a040309e81ad0e51f2f2966f9dcf2e04856404ac22f752fe91871134b42f14e98d55528bc95297d959f0422b26555a8502e6aad8360
-
SSDEEP
24576:cLh1gR6oPZP9j3tLOS3/26/sEyGKCplM4IsqjnhMgeiCl7G0nehbGZpbD:cLhFoJJ9SSuisEyGKCplGDmg27RnWGj
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-10-03_31a83ede8a5458de45860c24112f11d8_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-10-03_31a83ede8a5458de45860c24112f11d8_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.5MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.5MB