Analysis
-
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
23/01/2024, 00:17
Static task
static1
Behavioral task
behavioral1
Sample
2024-01-22_7d581cd63ed64a61054c0f90ebedd7bf_cobalt-strike_ryuk.exe
Resource
win7-20231215-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
2024-01-22_7d581cd63ed64a61054c0f90ebedd7bf_cobalt-strike_ryuk.exe
Resource
win10v2004-20231222-en
0 signatures
150 seconds
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2024-01-22_7d581cd63ed64a61054c0f90ebedd7bf_cobalt-strike_ryuk.exe
command="C:\Users\Admin\AppData\Local\Temp\2024-01-22_7d581cd63ed64a61054c0f90ebedd7bf_cobalt-strike_ryuk.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: %1 is not a valid Win32 application.
General
-
Target
2024-01-22_7d581cd63ed64a61054c0f90ebedd7bf_cobalt-strike_ryuk.exe
-
Size
233KB
-
MD5
7d581cd63ed64a61054c0f90ebedd7bf
-
SHA1
aba17fc2828a5957a435b456997a7a5ee4f524d2
-
SHA256
9da2d407e00afb89f941b5dea6a69d1b8f312c43eb522ce4b8d26c29128a438b
-
SHA512
6fc70f9caaf5b3af8abdf03d639f24505f423115b114a025c391b8e747fff7e544618b69e75d1409c0fa61c6dd3102d77d3d17b06e2a8fe4d1191e6e9b9478f2
-
SSDEEP
6144:2nFSNqsunUQPMvoxvn3kjpZppUaJ6QlHte3To/:2Fpxe6fiNUHuNF/
Score
1/10