Extracted

• • Target

    2024-09-21_d0e0461bc0a130c622013f61e35aff6d_hijackloader_ryuk

  • Size

    838KB

  • MD5

    d0e0461bc0a130c622013f61e35aff6d

  • SHA1

    715c1c5f403d7d1a9831be878e1d2a3910bc4f3e

  • SHA256

    d274787942d562893a74ebbfd28285e0c292ba50bed479038c90c0d2d21e368a

  • SHA512

    98d5043162a4e6a6c6a61026c6e5367bf43ad8eba9078e4818697d3aaac4c523f73777ea7cf803a87e81794d13e89ca1a484409c0ab7d9057c4ece43fa13802f

  • SSDEEP

    12288:hpTcb8nrtGiBhTrv4jAjCHD55gZGVB50K8Mnxu3omoa/5cdP:jTBXrv4jAaD55gZGVB50K8O4TS

  Score

  10^/10

  discoveryevasiontrojan

  • UAC bypass

    evasiontrojan

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  behavioral1behavioral2