9f75048b674c6f103cff63c8c0050e8cea83ada16a64b793bb5c8e42201cb407

Analysis

max time kernel
149s
max time network
151s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
29/05/2026, 20:36

Target
2026-05-29_a283b1507f4e49bb6f94d27ba9cd20a1_amadey_icedid_mespinoza_ryuk.exe
Size 1.4MB
Sample260529-zds91af16k
SHA256 9f75048b674c6f103cff63c8c0050e8cea83ada16a64b793bb5c8e42201cb407
MD5 a283b1507f4e49bb6f94d27ba9cd20a1
SHA1 4f377fb05d4e9bf7f849da3300752f1dba305585
SHA512 2492aa03f4d97edca624deeb23217099cb57d4b8b09757f16a9acea8fc01987e89e799a58e7713e717f9d6fdb68990a5ed7c29ac08a6485b862c1bbecf7cbbcb
SSDEEP 24576:yzt+Rw4DkzCk/HmS5Ov5jcAkSYqyEeAhY9:+V4DZwGhpYq+T
TLSH
T12865A10EFE604DB1D02280748592975EA6317C55CA238E8B1295BEEDFFF3F918D29631
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4940	2026-05-29_a283b1507f4e49bb6f94d27ba9cd20a1_amadey_icedid_mespinoza_ryuk.exe

C:\Users\Admin\AppData\Local\Temp\2026-05-29_a283b1507f4e49bb6f94d27ba9cd20a1_amadey_icedid_mespinoza_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2026-05-29_a283b1507f4e49bb6f94d27ba9cd20a1_amadey_icedid_mespinoza_ryuk.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4940