edfa96f3eea984d48505162a4eb51b482b01d824720d57d847cbca753f7240b8

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
18-02-2024 03:37

Target

2024-02-18_68030087feb1688f9f2949aa744a9216_ryuk.exe
Size

390KB
MD5

68030087feb1688f9f2949aa744a9216
SHA1

6e05124578c0dd09aa940193f7d2d2b16674f8d1
SHA256

edfa96f3eea984d48505162a4eb51b482b01d824720d57d847cbca753f7240b8
SHA512

8e8a93761725627dfffe64fd90d75e515e77691bad8712816450ba0ceaaaaf29a59315e0321897eb31d65d0a950a263dae81f512d1b83fd0020e0313c911f045
SSDEEP

12288:+HM+uoGPr6vehzUdCAuSKUoMPT7+U1mm:5+3GTbznRSKU9T7+M9

Score

1^/10

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
468	Process not Found

C:\Users\Admin\AppData\Local\Temp\2024-02-18_68030087feb1688f9f2949aa744a9216_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2024-02-18_68030087feb1688f9f2949aa744a9216_ryuk.exe"
1⤵
PID:2956