5db412434e8b084d121fdc011578aab59682da2aac81068be84d580ddd9c2d80 | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
04-05-2024 20:08

Sharing

Report Analysis Logs

General

Target

2024-05-04_7fcb6ce146f02076f5af1f9eefee943f_cobalt-strike_ryuk.exe
Size

946KB
MD5

7fcb6ce146f02076f5af1f9eefee943f
SHA1

9b2ced9c2aef4fb942c075ddf408b11aa3175e17
SHA256

5db412434e8b084d121fdc011578aab59682da2aac81068be84d580ddd9c2d80
SHA512

168e5c93ce503132f75fde9e21ba8a2f8355fcccdbc5c53d90006bbf78aa0c70b5f6f9208520ac1791e55689fe5bcd989442d5d6e5037995f004cce0050e6722
SSDEEP

12288:UlLMLTHAXoUpkdJAdGyqmqmFrfBCgiw4bivhqGoj85sVPL5qw+DCx:HTgnpwJ+RdqMrfUgYbkhqfj8uqw

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\2024-05-04_7fcb6ce146f02076f5af1f9eefee943f_cobalt-strike_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-04_7fcb6ce146f02076f5af1f9eefee943f_cobalt-strike_ryuk.exe"
1⤵
PID:1984

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1984-0-0x0000000002320000-0x0000000002380000-memory.dmp

Filesize
384KB

Download
memory/1984-6-0x0000000140000000-0x00000001400F6000-memory.dmp

Filesize
984KB

Download
memory/1984-10-0x0000000002320000-0x0000000002380000-memory.dmp

Filesize
384KB

Download
memory/1984-8-0x0000000002320000-0x0000000002380000-memory.dmp

Filesize
384KB

Download
memory/1984-7-0x0000000002320000-0x0000000002380000-memory.dmp

Filesize
384KB

Download
memory/1984-12-0x0000000140000000-0x00000001400F6000-memory.dmp

Filesize
984KB

Download