c5ad1768a486fc91359b33e82a207f211b878fa2f19b31a3cd7a4adc018c38b3

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
31-05-2024 06:57

Target

2024-05-31_9d256eeaac4c2ee260ac69a41f853d32_cova_ryuk.exe
Size

15.3MB
MD5

9d256eeaac4c2ee260ac69a41f853d32
SHA1

b3eb945192b883ac89206e0d12962c11510a9bd9
SHA256

c5ad1768a486fc91359b33e82a207f211b878fa2f19b31a3cd7a4adc018c38b3
SHA512

0f369558c8a9136a959c0f034169276bee9fe23f47f924cf3cab0b409255734fc57f0c9325a64ef43845b4e002651ed0e4deb02680259f7b845dbc8e9ec542ae
SSDEEP

393216:Qu0wZUKsiZVeVmkSB0FwFKE3gkWUaxGt7FIUa9:3JZ3xneckjFwFn3gWwJ9

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2416	2024-05-31_9d256eeaac4c2ee260ac69a41f853d32_cova_ryuk.exe

C:\Users\Admin\AppData\Local\Temp\2024-05-31_9d256eeaac4c2ee260ac69a41f853d32_cova_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-31_9d256eeaac4c2ee260ac69a41f853d32_cova_ryuk.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:2416