4fa4785deef3fb9bc9df4fddcb54023191df31fae237235eb790db6e8a1a28d0

Analysis

max time kernel
148s
max time network
40s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
17/10/2026, 19:52

Target
ripper.exe
Size 7.1MB
Sample261017-yle7nsgf64
SHA256 4fa4785deef3fb9bc9df4fddcb54023191df31fae237235eb790db6e8a1a28d0
MD5 e2f807082c61947738a412d5c7e0e8a9
SHA1 22ada656108c39bd515f7ced87692d824004a78f
SHA512 50aafa442b5b3e17d0ae87189e49350a2e89b9790119f9bb2a94690f2dfa095bb4098c79117087da352d5762948c15b250bdd97965f9590a47b950cdc3ee5f86
SSDEEP 49152:CX26Kzk1CTTHwyx7NxM+FZ8MmUVY5H+rDWFMBd2NFOXCswAyHtX9TSH8x3KuKPfJ:CXdK5HdAQZNmo4eriFMBGQMKzYbqhP+
TLSH
T127767B02B65B99ECD05AC8B0934696735E2274CB0B36B9FF41C855383F6ABE05F38719
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
1072	ripper.exe

C:\Users\Admin\AppData\Local\Temp\ripper.exe
"C:\Users\Admin\AppData\Local\Temp\ripper.exe"
1⤵
- Suspicious use of FindShellTrayWindow
PID:1072