Analysis
-
max time kernel
147s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
06/04/2024, 12:48
General
-
Target
2024-04-06_4685759004f6ed0425989fcb774bfa2d_cobalt-strike_ryuk.exe
-
Size
946KB
-
MD5
4685759004f6ed0425989fcb774bfa2d
-
SHA1
109fdc533ea18feadba1a55bd8a63b7cd88e6ee6
-
SHA256
b597a2eb9baa125689cb14abb45be6ed770cccb8fe038bcbb794232a0f224ef2
-
SHA512
12de3f001ca92dfc669e63ce121b2b6cc55f70cf8070536a3b688cbcc76699270988142b3a62618c2965b7ac7422a9b4ccd8bc519278c50525abb5ee1e230938
-
SSDEEP
12288:RlLMLTHAXoUpkdJAdGyf+B6WK8MSKmO5fIxszMIZKEvGr0j8WBBg/MCJXWl:MTgnpwJ+RfG6P8bO5KIvdJeMCJXWl
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-06_4685759004f6ed0425989fcb774bfa2d_cobalt-strike_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-06_4685759004f6ed0425989fcb774bfa2d_cobalt-strike_ryuk.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
984KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
984KB