Analysis
-
max time kernel
94s -
max time network
135s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21/11/2024, 11:23
General
-
Target
2024-11-21_0a56b78cd5b54bd3b78b37831d342cba_ryuk.exe
-
Size
1.7MB
-
MD5
0a56b78cd5b54bd3b78b37831d342cba
-
SHA1
67905bd0c8aab227f15b6d5b087213ba81874b13
-
SHA256
4e1f26e181a25ea9e0085e17c3da796417c08364d48f5bfee1761aa6154dfd0f
-
SHA512
9d784decfaf9165d18d0a5bb91a154e788b365f8edca0b1e0488d7e5b4c8058db23b86ef72dc5ce6131943d91bebb793d61aca71d3c44c4ba05cfd70a420da64
-
SSDEEP
12288:qhUkkiwt4PZnmYO6dymLZwDLmaLIDmEQiPqcjmXj38nBQPZGlQcBLuAS/oGcDLDv:qhU+qxGlQc5uxzNyBo4kx929bL3Hnx
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-11-21_0a56b78cd5b54bd3b78b37831d342cba_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-11-21_0a56b78cd5b54bd3b78b37831d342cba_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.7MB
-
Filesize
384KB
-
Filesize
1.7MB
-
Filesize
384KB
-
Filesize
384KB