663aa7d7b7fe085b032b8d69be2eeae80a0a03dbc9f963028ba02c8f7de3ffdf

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
15-04-2024 09:36

Target

2024-04-15_35aec60c2249ab23755560b8d5dac110_ryuk.exe
Size

91KB
MD5

35aec60c2249ab23755560b8d5dac110
SHA1

10202cad9808cedceb7678f5ae61d2fd3c62fdd0
SHA256

663aa7d7b7fe085b032b8d69be2eeae80a0a03dbc9f963028ba02c8f7de3ffdf
SHA512

5223ffc3e471db91fd39d8158b691fd514f247e48ca02aa60910d4616df4dda87790f24d69bf33fe4dce198d5b5e35df426316df1f9c5efae756578f47ef886b
SSDEEP

1536:0uRFSPMJQAS2K7+gZfkEgaIwgKG1sWVdc9dlDXnGa9VhR68rgv:0uzSPwq7BFkErHRGHUl3t9VhRZ

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes:

2024-04-15_35aec60c2249ab23755560b8d5dac110_ryuk.exe

pid process

2172 2024-04-15_35aec60c2249ab23755560b8d5dac110_ryuk.exe

pid	process
2172	2024-04-15_35aec60c2249ab23755560b8d5dac110_ryuk.exe

C:\Users\Admin\AppData\Local\Temp\2024-04-15_35aec60c2249ab23755560b8d5dac110_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2024-04-15_35aec60c2249ab23755560b8d5dac110_ryuk.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2172