298e0aaa344809103b597c496dec59f2ab8c7369d47a1163797071601f2bd6d7

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
23/08/2026, 18:55

Target
2026-08-23_dab4d825dcfd659d50b9f5309a363c3d_ryuk.exe
Size 222KB
Sample260823-xkr96styay
SHA256 298e0aaa344809103b597c496dec59f2ab8c7369d47a1163797071601f2bd6d7
MD5 dab4d825dcfd659d50b9f5309a363c3d
SHA1 47c3b5a5c861f93c31a5f26fcfb3e9112d079e61
SHA512 8793a69d27cf34e9bf2466d52f3760e34bb94eab5d107bab49821062a2d1ec17a9b4dfbb6118203aa835f98c2b68ef6431bc067ad818366641055b5e5ca2c6d6
SSDEEP 3072:OBm7IPQYzbRIU8dodz4yESP4gT0WoaO4ZEWkI/nQNG25YFeqC9dI:OBm5FFRyESPAWoGEWDvOG2icp
TLSH
T1D924575FB205ABC5D79E56FAAC3B9C3C57E2BCA149650B131140630E2CE2E8DBD674C2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious behavior: EnumeratesProcesses 4 IoCs

C:\Users\Admin\AppData\Local\Temp\2026-08-23_dab4d825dcfd659d50b9f5309a363c3d_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2026-08-23_dab4d825dcfd659d50b9f5309a363c3d_ryuk.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1856