Analysis
-
max time kernel
0s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
25-04-2024 06:29
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2024-04-25_82921d664c8de9442d8aacd1fa636bc8_cobalt-strike_ryuk.exe
command="C:\Users\Admin\AppData\Local\Temp\2024-04-25_82921d664c8de9442d8aacd1fa636bc8_cobalt-strike_ryuk.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
-
Target
2024-04-25_82921d664c8de9442d8aacd1fa636bc8_cobalt-strike_ryuk.exe
-
Size
981KB
-
MD5
82921d664c8de9442d8aacd1fa636bc8
-
SHA1
2f2e630ed355f082ed3c05454cf0ec61ba9afb2a
-
SHA256
e346b1bc0b61c197167167cb9aad461ece3eeadf6db7bda6efb523838632d249
-
SHA512
50a5b4124d6414e4d5b09332aaf2050fda490d22845502a99c54af864c6d18f94fc6c7aa11fc3602692381468c9512730f58250accbb3c7b2198d48c2bb6c6c3
-
SSDEEP
12288:KJA1Nm1BkLkSe/xSmLsJfNg2LYHmMkrAmMGJKeWoIaCgh8:BNcQe/xSmLAfNgaYkAm6zfG8
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-25_82921d664c8de9442d8aacd1fa636bc8_cobalt-strike_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-25_82921d664c8de9442d8aacd1fa636bc8_cobalt-strike_ryuk.exe"1⤵