4a7e6da20fe577280108bd8c793fd581b41e8c9e250c710c6da64168ab3a0b93

Analysis

max time kernel
121s
max time network
124s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
17/10/2024, 18:47

Target

2024-10-17_a26cfc0becffa3b801186e2fb2a92ac4_hijackloader_ryuk.exe
Size

8.1MB
MD5

a26cfc0becffa3b801186e2fb2a92ac4
SHA1

061f26464dcafc959762430602fcefce97ed5128
SHA256

4a7e6da20fe577280108bd8c793fd581b41e8c9e250c710c6da64168ab3a0b93
SHA512

b7ed39f80a6cb5942aef731cf8a5f43fab5436a5cf57249527ac1024ed0048e59b0cf8f28e333c39b0be7d2a93ca804277e46fc517fbbc69153307b8e91c7065
SSDEEP

196608:wdFl+uyDfL6lO8tgF4xxqM4DojsQczArxsx:wdFl+uyDfL6lO8tgExqzysQcz2Kx

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
540	2024-10-17_a26cfc0becffa3b801186e2fb2a92ac4_hijackloader_ryuk.exe

C:\Users\Admin\AppData\Local\Temp\2024-10-17_a26cfc0becffa3b801186e2fb2a92ac4_hijackloader_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2024-10-17_a26cfc0becffa3b801186e2fb2a92ac4_hijackloader_ryuk.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:540