761ae90a039422c784fd61372557ba5c0d61b54bb27755c8d5386d3a5bbbde0d

Analysis

max time kernel
120s
max time network
139s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
26/04/2024, 00:30

Target

2024-04-26_2f7f87e9f4439540ae4d865ce633cbf4_ryuk.exe
Size

6.9MB
MD5

2f7f87e9f4439540ae4d865ce633cbf4
SHA1

a37c21bfff58a0ebbb5c49e5c554843cf6a028f1
SHA256

761ae90a039422c784fd61372557ba5c0d61b54bb27755c8d5386d3a5bbbde0d
SHA512

bed45bb9bf41f5fc6118b5d12786610a3ba7895bbd3b62f668ee2d7762eea67806d9b381c88bcdf117793a7815eb063c059ab848654a57a5b364349fbd04e2d2
SSDEEP

49152:MuxAaLR/73PgqJaVZAXCX3AYj9WMJKI98XaYCc4UbR2qvJgtpcMNXKtgqqEbEfZd:lwLYhVJkpcMJQgfJ/DXAIdniAUs

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2104	2024-04-26_2f7f87e9f4439540ae4d865ce633cbf4_ryuk.exe

C:\Users\Admin\AppData\Local\Temp\2024-04-26_2f7f87e9f4439540ae4d865ce633cbf4_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2024-04-26_2f7f87e9f4439540ae4d865ce633cbf4_ryuk.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2104