05e496b3c9859286d07ab0e25d9127526750d3326b9c7f300b414acdeade579a

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
06/05/2024, 23:28

Target

2024-05-06_e62cfaf2c5f11f617b9aec270098de82_ryuk.exe
Size

1.4MB
MD5

e62cfaf2c5f11f617b9aec270098de82
SHA1

c57af0504dd34d09d0b50dcb2874392b96513913
SHA256

05e496b3c9859286d07ab0e25d9127526750d3326b9c7f300b414acdeade579a
SHA512

5293bdc8ca6ea019da93dae648b4ae4e98970f026ecf24a6472cbe9c25baa5b290dddfb41bf640b53c608de535f97f3178a73d80bdbbde04aae760cb21917336
SSDEEP

24576:7lU74/s8CUCfJdjgqsLqf3ZfMmVcX3hmyaadfkzrS4LcNcts2g2cKjTeqbGDGOrZ:7Kc0rJdjgqsLqf3ZfM0Pa5kLLcatsXkE

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2644	2024-05-06_e62cfaf2c5f11f617b9aec270098de82_ryuk.exe

C:\Users\Admin\AppData\Local\Temp\2024-05-06_e62cfaf2c5f11f617b9aec270098de82_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-06_e62cfaf2c5f11f617b9aec270098de82_ryuk.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:2644