Analysis

  • max time kernel
    150s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/11/2024, 14:24

General

  • Target

    2024-11-19_04406e8b2f120162d147bfece8d98a83_ryuk.exe

  • Size

    1.6MB

  • MD5

    04406e8b2f120162d147bfece8d98a83

  • SHA1

    34828bf8f16d442eb75b864fa880aec7e2b530d3

  • SHA256

    e70ed6c5a35cd4bbb7995f45ffee2ed15baf80fc92382d179ffbbe465ff0f74d

  • SHA512

    e810973776f5823aa52500d85498eb7d6af22ad5650aaab9093a70a266718fc4af25d841407d5ac5818f4b580b67ff7d28596526fa997eb50d2d79bcec8f4e3c

  • SSDEEP

    24576:xpL3UTF/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:xpL3UpLNiXicJFFRGNzj3

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-11-19_04406e8b2f120162d147bfece8d98a83_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-11-19_04406e8b2f120162d147bfece8d98a83_ryuk.exe"
    1⤵
      PID:432

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/432-0-0x0000000140000000-0x0000000140273000-memory.dmp

      Filesize

      2.4MB

    • memory/432-1-0x0000000000530000-0x0000000000590000-memory.dmp

      Filesize

      384KB

    • memory/432-9-0x0000000000530000-0x0000000000590000-memory.dmp

      Filesize

      384KB

    • memory/432-13-0x0000000140000000-0x0000000140273000-memory.dmp

      Filesize

      2.4MB

    • memory/432-14-0x0000000000530000-0x0000000000590000-memory.dmp

      Filesize

      384KB