Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    06/03/2025, 17:40

General

  • Target

    2025-03-06_c32074c697181bb10785afb2251e3d97_ryuk.exe

  • Size

    691KB

  • MD5

    c32074c697181bb10785afb2251e3d97

  • SHA1

    1e35ab0f31510f19d84369f132ec417941f1d2a9

  • SHA256

    b80cf979042c47ac0faaefcdf4e92142aff6aaaf0286b67a9e0835138a3e7707

  • SHA512

    140667faba182b2207ac416b221aedd5f793e320a0f2ae9d0fd33586fa60bef270c602985fee0671ebbae5e9caaf45d2726cfd0d377e973c6c6d24bf4ca96a36

  • SSDEEP

    6144:aNrRsZd9uXuSZSs9egMz4Od/LLrnm3TP1U4sx09xJTtP7/F30EFKp/FgmX:aNrRfZSs9ezz/PwTP1Utq9MEUp/ymX

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2025-03-06_c32074c697181bb10785afb2251e3d97_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2025-03-06_c32074c697181bb10785afb2251e3d97_ryuk.exe"
    1⤵
      PID:2480

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2480-7-0x0000000000310000-0x0000000000315000-memory.dmp

      Filesize

      20KB

    • memory/2480-6-0x00000000001F0000-0x00000000001F7000-memory.dmp

      Filesize

      28KB

    • memory/2480-11-0x0000000000320000-0x0000000000324000-memory.dmp

      Filesize

      16KB

    • memory/2480-3-0x0000000000310000-0x0000000000315000-memory.dmp

      Filesize

      20KB

    • memory/2480-2-0x000000013FE10000-0x000000013FEB4000-memory.dmp

      Filesize

      656KB

    • memory/2480-0-0x0000000000320000-0x0000000000324000-memory.dmp

      Filesize

      16KB