81ff218ac87e37e6c0e66546445f18131c072186d151998f2f8cff87a3bc7da2

Analysis

max time kernel
126s
max time network
130s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
05-07-2024 22:17

Target

2024-07-05_c924e0d5ad23521317a868aa1532c3e4_poet-rat_ryuk.exe
Size

6.8MB
MD5

c924e0d5ad23521317a868aa1532c3e4
SHA1

f2be20217b1bceaa274e7e20b0875f82be247c11
SHA256

81ff218ac87e37e6c0e66546445f18131c072186d151998f2f8cff87a3bc7da2
SHA512

3f33ca5dfb395ce0afe9e5b28cf875a1a775a09068365801e6f6c33408868bb73e305738a9f45ba3fc05eaadacd00e1088342d6d57375fa4fc744b20cd82c99d
SSDEEP

98304:cs+GKR2LbKq181x4hjKCKBIniAU2HL2w8Cl:cs+jR2D1Cx49KdBIniAU2r

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1900	2024-07-05_c924e0d5ad23521317a868aa1532c3e4_poet-rat_ryuk.exe

C:\Users\Admin\AppData\Local\Temp\2024-07-05_c924e0d5ad23521317a868aa1532c3e4_poet-rat_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2024-07-05_c924e0d5ad23521317a868aa1532c3e4_poet-rat_ryuk.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1900

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --field-trial-handle=4148,i,18341222626402534844,12352985901844242237,262144 --variations-seed-version --mojo-platform-channel-handle=2868 /prefetch:8
1⤵
PID:3236