1f1c14c846ba62900aefc7ac169ba758a307fe0c6e83db4bd6a27c2d6d1f6eea | Triage

Analysis

max time kernel
117s
max time network
117s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
15/04/2024, 07:07

Sharing

Report Analysis Logs

General

Target

2024-04-15_38f7909126ca47db11dec56ab003f9bd_cobalt-strike_ryuk.exe
Size

796KB
MD5

38f7909126ca47db11dec56ab003f9bd
SHA1

3629ed274d9346d42147eae46bbaee3947f7c36a
SHA256

1f1c14c846ba62900aefc7ac169ba758a307fe0c6e83db4bd6a27c2d6d1f6eea
SHA512

650b1e9ff05f8f7162dc359d7c32de6a2aae08af38b267eff6262bc031035dad94b9f409c5a6ab114c71a923f5ac6c24a96989fc5d78452aacc32f6cf2341f87
SSDEEP

24576:jANw243Ee1g6p7HF/w/ftDsBUiScD7WGfWVbvf4CNQE:jew2ZmgiTd8DsMcDKGfWbYCGE

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\2024-04-15_38f7909126ca47db11dec56ab003f9bd_cobalt-strike_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2024-04-15_38f7909126ca47db11dec56ab003f9bd_cobalt-strike_ryuk.exe"
1⤵
PID:1244

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1244-0-0x00000000022D0000-0x0000000002330000-memory.dmp

Filesize
384KB

Download
memory/1244-2-0x0000000140000000-0x00000001400CF000-memory.dmp

Filesize
828KB

Download
memory/1244-7-0x00000000022D0000-0x0000000002330000-memory.dmp

Filesize
384KB

Download
memory/1244-8-0x00000000022D0000-0x0000000002330000-memory.dmp

Filesize
384KB

Download
memory/1244-11-0x00000000022D0000-0x0000000002330000-memory.dmp

Filesize
384KB

Download
memory/1244-13-0x0000000140000000-0x00000001400CF000-memory.dmp

Filesize
828KB

Download