f55e9b34f5c9e48703ddb9a3c1cdd9656ae5d7597ee5dd0da02bee805334cb74

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
14/08/2026, 13:25

Target
2026-08-14_7008ed64d89ae4ed43fd83ecf4446eb8_icedid_ryuk.exe
Size 312KB
Sample260814-qn89jacm21
SHA256 f55e9b34f5c9e48703ddb9a3c1cdd9656ae5d7597ee5dd0da02bee805334cb74
MD5 7008ed64d89ae4ed43fd83ecf4446eb8
SHA1 27822bbab3971a15c6be10bfebbe37a16ab1595e
SHA512 b3eb97f2dc7ca7cd16ec096a80369e526e5b6a227a0530e36d3ea1686e89d9420bf7a977c76f538c3450a332952a7410c9724884272d322755a14808e629733b
SSDEEP 6144:g/xeaxzDn3Qgo0JT+hiDzlOi9E3AAqgm:qxeaFVo0YhwzlOi9E3AAqz
TLSH
T1F364A3067141EA99C8614130CC2EDAF57B227CE4C6A14AF73AF27F7F3D752426D9A620
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4676	2026-08-14_7008ed64d89ae4ed43fd83ecf4446eb8_icedid_ryuk.exe

C:\Users\Admin\AppData\Local\Temp\2026-08-14_7008ed64d89ae4ed43fd83ecf4446eb8_icedid_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-14_7008ed64d89ae4ed43fd83ecf4446eb8_icedid_ryuk.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4676

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x3d4 0x150
1⤵
PID:4272