6f55662b1ec78350e8dae5ea5377df36bd048b9a72d643ade4526b74da8537c9 | Triage

Resubmissions

06/03/2025, 17:33

250306-v49mfsvks5 3

06/03/2025, 17:30

250306-v3e2fstwdw 10

Analysis

max time kernel
16s
max time network
16s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
06/03/2025, 17:30

Sharing

Report Analysis Logs

General

Target

2025-03-06_e664cc9bde017862a2c484b30cb7ea93_ryuk.exe
Size

1.5MB
MD5

e664cc9bde017862a2c484b30cb7ea93
SHA1

c5a1415e2860fa0aa106e6ddbdb3d7d7e62e2fc0
SHA256

6f55662b1ec78350e8dae5ea5377df36bd048b9a72d643ade4526b74da8537c9
SHA512

574d466b24c3db733353a43bbd3e95806b13c22c6bd86313f20470566bf06326593987bed9ed173bdea088d1b28a85d2f703ff0908d534478e6a490066297730
SSDEEP

49152:eVzpfQd4T9kIDGE63XVGpclbwbWAaJiwmcTdcoeG88:mfIXIxqPFE98

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\2025-03-06_e664cc9bde017862a2c484b30cb7ea93_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2025-03-06_e664cc9bde017862a2c484b30cb7ea93_ryuk.exe"
1⤵
PID:2528

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2528-1-0x0000000000200000-0x0000000000205000-memory.dmp

Filesize
20KB

Download
memory/2528-2-0x0000000000210000-0x0000000000214000-memory.dmp

Filesize
16KB

Download
memory/2528-0-0x00000000001E0000-0x00000000001E7000-memory.dmp

Filesize
28KB

Download
memory/2528-6-0x0000000000210000-0x0000000000214000-memory.dmp

Filesize
16KB

Download
memory/2528-5-0x0000000000200000-0x0000000000205000-memory.dmp

Filesize
20KB

Download
memory/2528-9-0x0000000000200000-0x0000000000205000-memory.dmp

Filesize
20KB

Download