aa89c8139d7e60d4008f20593d878ff78243901fc136a2b8904de2b236daa592

Analysis

max time kernel
145s
max time network
126s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
28/07/2024, 00:44

Target

2024-07-28_05d7d6f324d60b647029885f8291c08b_ryuk.exe
Size

148KB
MD5

05d7d6f324d60b647029885f8291c08b
SHA1

53543fff71cb49413acb74741fec8c532b6a945b
SHA256

aa89c8139d7e60d4008f20593d878ff78243901fc136a2b8904de2b236daa592
SHA512

909545b7d087728ab9535572877252ddda5695c46290ba236e420054bf05a1d35e25faca8f0535b2b3f569a0ec6e785a30ec196f1b869c127b4a6dc0b9de02e9
SSDEEP

3072:GnSWGHw2kkye/g8o2ecQvvLjr5SpSgrkevt6L3it/HA:GP2wu5oL7vz9VevwjOI

Score

1^/10

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2372	2024-07-28_05d7d6f324d60b647029885f8291c08b_ryuk.exe

C:\Users\Admin\AppData\Local\Temp\2024-07-28_05d7d6f324d60b647029885f8291c08b_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2024-07-28_05d7d6f324d60b647029885f8291c08b_ryuk.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:2372