Analysis
-
max time kernel
92s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
19/11/2024, 19:35
General
-
Target
2024-11-19_ba1699c2dc8da822194d2909a93789c7_ryuk.exe
-
Size
20.0MB
-
MD5
ba1699c2dc8da822194d2909a93789c7
-
SHA1
360eaf4be61b5aee6eade4aa762b9d767ff3c6d6
-
SHA256
7c85adc03c66870edd8c0dd349fa3a8c2b7561a700049b91457e46403c5e0d99
-
SHA512
65dcac157f783c8647ec028eda12eb2bc7f3464d33f66140c8d8c0bf27ecf57e7a3f2a661b3518b3bd54b45c03e6623e8240fa4f017087ec9b354ccde21c9084
-
SSDEEP
196608:Zr/Pt5LXCuz9eL5FUtX48nvhbTWxszc8YdBMKSrXexGsAnsl:JXt5LXCuz9eL5FUtX48nvoa18Gnsl
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SetWindowsHookEx 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-11-19_ba1699c2dc8da822194d2909a93789c7_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-11-19_ba1699c2dc8da822194d2909a93789c7_ryuk.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
2.0MB
-
Filesize
2.0MB