22fddca23e31edd86cd667256b1c2485b7958f4f0a4e37adf854442d92906c51

Analysis

max time kernel
140s
max time network
133s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
03/07/2024, 19:50

Target

2024-07-03_1d1f42713544183c1618b25e539a81be_ryuk.exe
Size

4.8MB
MD5

1d1f42713544183c1618b25e539a81be
SHA1

6f78327528c1787252a90787a26491a67bc6c502
SHA256

22fddca23e31edd86cd667256b1c2485b7958f4f0a4e37adf854442d92906c51
SHA512

858d387985119fdd89743a955a419fe418b8bdbea04c4d09a9db72442ae31ee830d75f4a2d532270f6d4514b60be0861905e4445b928ae5aea9d596196e17a6d
SSDEEP

49152:L1yceiz6FFK+tmsazIJ2A5+dxXOfThSdWDu3V7/bmI7zsF8qw6fPeqfX6GT5nCLH:MJUdXDyyVnmqDieqf4QJLq

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1256	2024-07-03_1d1f42713544183c1618b25e539a81be_ryuk.exe

C:\Users\Admin\AppData\Local\Temp\2024-07-03_1d1f42713544183c1618b25e539a81be_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2024-07-03_1d1f42713544183c1618b25e539a81be_ryuk.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1256