aa89c8139d7e60d4008f20593d878ff78243901fc136a2b8904de2b236daa592

Analysis

max time kernel
148s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
28/07/2024, 00:44

Target

2024-07-28_05d7d6f324d60b647029885f8291c08b_ryuk.exe
Size

148KB
MD5

05d7d6f324d60b647029885f8291c08b
SHA1

53543fff71cb49413acb74741fec8c532b6a945b
SHA256

aa89c8139d7e60d4008f20593d878ff78243901fc136a2b8904de2b236daa592
SHA512

909545b7d087728ab9535572877252ddda5695c46290ba236e420054bf05a1d35e25faca8f0535b2b3f569a0ec6e785a30ec196f1b869c127b4a6dc0b9de02e9
SSDEEP

3072:GnSWGHw2kkye/g8o2ecQvvLjr5SpSgrkevt6L3it/HA:GP2wu5oL7vz9VevwjOI

Score

1^/10

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4660	2024-07-28_05d7d6f324d60b647029885f8291c08b_ryuk.exe
4660	2024-07-28_05d7d6f324d60b647029885f8291c08b_ryuk.exe

C:\Users\Admin\AppData\Local\Temp\2024-07-28_05d7d6f324d60b647029885f8291c08b_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2024-07-28_05d7d6f324d60b647029885f8291c08b_ryuk.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4660