2d133a81c7cc2f6a9cf9af981f7e75897426039219220b11ed9956381ecdfd3f

Analysis

max time kernel
92s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
08/06/2024, 10:24

Target

2024-06-08_560bc30eb92d0a67565571a116a54d92_ryuk_zxxz.exe
Size

27.5MB
MD5

560bc30eb92d0a67565571a116a54d92
SHA1

97d1b591a877d2eefe7b38b0093cdef606fa054a
SHA256

2d133a81c7cc2f6a9cf9af981f7e75897426039219220b11ed9956381ecdfd3f
SHA512

acb96066282e0c3a5dd35f07979143096addc63c6e98d140757f365d79a24ee11001bec924352ec13ce36060a85185b934742d582954744bff9fdf3ac08d2634
SSDEEP

393216:4Ek/oqFJ0VhBBHIRLtKN5jowNJPWehgCzZXlUyAI9:4O7BJzZfAI9

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1608	2024-06-08_560bc30eb92d0a67565571a116a54d92_ryuk_zxxz.exe
1608	2024-06-08_560bc30eb92d0a67565571a116a54d92_ryuk_zxxz.exe

C:\Users\Admin\AppData\Local\Temp\2024-06-08_560bc30eb92d0a67565571a116a54d92_ryuk_zxxz.exe
"C:\Users\Admin\AppData\Local\Temp\2024-06-08_560bc30eb92d0a67565571a116a54d92_ryuk_zxxz.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1608