Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
19/06/2024, 20:23
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-19_68d7afaf429b99373f7812ce59b64e29_ryuk.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-06-19_68d7afaf429b99373f7812ce59b64e29_ryuk.exe
Resource
win10v2004-20240508-en
1 signatures
150 seconds
General
-
Target
2024-06-19_68d7afaf429b99373f7812ce59b64e29_ryuk.exe
-
Size
13.2MB
-
MD5
68d7afaf429b99373f7812ce59b64e29
-
SHA1
7bd50c1826f94dce2c8ffe2c9b4d33da25ea311c
-
SHA256
331490be7e24e8ee4e915086c92d2a9a31dde8a1c2f256414161e5eb5922bbf5
-
SHA512
1efb7b84ea6da91749fcf46deb971f67b985360317a4c4371217935857636460e7787d4f2c232bb07be0a129314133d456df5dedd4bff7ea877a855e693d63e5
-
SSDEEP
196608:USfYjp0XFzDVIRnTsw2E7cRGo8sOgZo0aHMGHcM3OMT3:3gjpCFzD2ReOpOMT3
Score
1/10
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main 2024-06-19_68d7afaf429b99373f7812ce59b64e29_ryuk.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2156 2024-06-19_68d7afaf429b99373f7812ce59b64e29_ryuk.exe 2156 2024-06-19_68d7afaf429b99373f7812ce59b64e29_ryuk.exe 2156 2024-06-19_68d7afaf429b99373f7812ce59b64e29_ryuk.exe 2156 2024-06-19_68d7afaf429b99373f7812ce59b64e29_ryuk.exe