8c52e1acf1922a46f1ba0a9d01c953e6fc32d4a61a5521a07f9a6cf9bd264e26

Analysis

max time kernel
144s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
03/02/2024, 07:40

Target

2024-02-03_dce672333edcaf38281f0cbe31b65baf_ryuk.exe
Size

390KB
MD5

dce672333edcaf38281f0cbe31b65baf
SHA1

c2c709b225e0e955b2e0525ec9f5c4c5c28519d7
SHA256

8c52e1acf1922a46f1ba0a9d01c953e6fc32d4a61a5521a07f9a6cf9bd264e26
SHA512

8228e3f7703825ea2c3c28ff3364f80c4df7ffa016ee4f27cf697d45e13ecb716ddebdc706f05fc6b1b76e56cbf42a79c847ab3b97db0834489e059b3e1cc6a7
SSDEEP

12288:+HM+uoGPr6vehzUdCAuSKUoMPT7+U1mL:5+3GTbznRSKU9T7+Mo

Score

1^/10

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
656	Process not Found

C:\Users\Admin\AppData\Local\Temp\2024-02-03_dce672333edcaf38281f0cbe31b65baf_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-03_dce672333edcaf38281f0cbe31b65baf_ryuk.exe"
1⤵
PID:3652