81ff218ac87e37e6c0e66546445f18131c072186d151998f2f8cff87a3bc7da2

Analysis

max time kernel
121s
max time network
123s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
05/07/2024, 22:17

Target

2024-07-05_c924e0d5ad23521317a868aa1532c3e4_poet-rat_ryuk.exe
Size

6.8MB
MD5

c924e0d5ad23521317a868aa1532c3e4
SHA1

f2be20217b1bceaa274e7e20b0875f82be247c11
SHA256

81ff218ac87e37e6c0e66546445f18131c072186d151998f2f8cff87a3bc7da2
SHA512

3f33ca5dfb395ce0afe9e5b28cf875a1a775a09068365801e6f6c33408868bb73e305738a9f45ba3fc05eaadacd00e1088342d6d57375fa4fc744b20cd82c99d
SSDEEP

98304:cs+GKR2LbKq181x4hjKCKBIniAU2HL2w8Cl:cs+jR2D1Cx49KdBIniAU2r

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1320	2024-07-05_c924e0d5ad23521317a868aa1532c3e4_poet-rat_ryuk.exe

C:\Users\Admin\AppData\Local\Temp\2024-07-05_c924e0d5ad23521317a868aa1532c3e4_poet-rat_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2024-07-05_c924e0d5ad23521317a868aa1532c3e4_poet-rat_ryuk.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1320