Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    06/03/2025, 19:46

General

  • Target

    2025-03-06_6c00c2a4a51ab0484b32a1e699e8f403_ryuk.exe

  • Size

    691KB

  • MD5

    6c00c2a4a51ab0484b32a1e699e8f403

  • SHA1

    65a5b0724a754ff9aa549ec6ff3affec8bdd4af0

  • SHA256

    753c41c1213c462834a990476d9c327050176509eae093a574190d3726fe8cb0

  • SHA512

    e39b8bb555771725ca45d027cc32c40e34f0ec95baaf7069f91b20735d9fd1ea2fdb0e26a91d6ed191065f577a5e535eb660d54c9f121691f138d84b356843c1

  • SSDEEP

    6144:jN30RyG9seFais9ybKzf+kFLLdOauLSAers509xJTtP7/F30rJyQBK2T7ge:jN309ais9yGznF+LSAewy9MrJAU/

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2025-03-06_6c00c2a4a51ab0484b32a1e699e8f403_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2025-03-06_6c00c2a4a51ab0484b32a1e699e8f403_ryuk.exe"
    1⤵
      PID:1924

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1924-7-0x00000000002F0000-0x00000000002F7000-memory.dmp

      Filesize

      28KB

    • memory/1924-2-0x000000013FA40000-0x000000013FAE4000-memory.dmp

      Filesize

      656KB

    • memory/1924-0-0x0000000000320000-0x0000000000324000-memory.dmp

      Filesize

      16KB

    • memory/1924-8-0x0000000000310000-0x0000000000315000-memory.dmp

      Filesize

      20KB

    • memory/1924-3-0x0000000000310000-0x0000000000315000-memory.dmp

      Filesize

      20KB