bd1f7cc4501bc485b9c4a3380adae6beece8cbc3848ff78fd66c23b6d58fdc58

Analysis

max time kernel
117s
max time network
117s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
31-03-2024 02:36

Target

2024-03-31_94459cb79e9b30c85e44f997a774301d_ryuk.exe
Size

87KB
MD5

94459cb79e9b30c85e44f997a774301d
SHA1

861440a8db06879ca79b1b524c154945776ee915
SHA256

bd1f7cc4501bc485b9c4a3380adae6beece8cbc3848ff78fd66c23b6d58fdc58
SHA512

58d379a9e62548ad05cfe4398f9d025c7c63b0143f5ef3e1cc4381aa7e6ae5a9f711467b7cb2aa60805490545d0fb3440ccf7618e72821b4b6e358894e85108c
SSDEEP

1536:98G7MwqqwS26x325YGHXqoaO1w6L7lgP2sW5dc9dlQxC6LuVhV/59:1owPwP605F3jaO1HJS8U6NuVhV

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes:

2024-03-31_94459cb79e9b30c85e44f997a774301d_ryuk.exe

pid process

2972 2024-03-31_94459cb79e9b30c85e44f997a774301d_ryuk.exe

pid	process
2972	2024-03-31_94459cb79e9b30c85e44f997a774301d_ryuk.exe

C:\Users\Admin\AppData\Local\Temp\2024-03-31_94459cb79e9b30c85e44f997a774301d_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2024-03-31_94459cb79e9b30c85e44f997a774301d_ryuk.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2972