5db412434e8b084d121fdc011578aab59682da2aac81068be84d580ddd9c2d80

Analysis

max time kernel
141s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
04/05/2024, 20:08

Target

2024-05-04_7fcb6ce146f02076f5af1f9eefee943f_cobalt-strike_ryuk.exe
Size

946KB
MD5

7fcb6ce146f02076f5af1f9eefee943f
SHA1

9b2ced9c2aef4fb942c075ddf408b11aa3175e17
SHA256

5db412434e8b084d121fdc011578aab59682da2aac81068be84d580ddd9c2d80
SHA512

168e5c93ce503132f75fde9e21ba8a2f8355fcccdbc5c53d90006bbf78aa0c70b5f6f9208520ac1791e55689fe5bcd989442d5d6e5037995f004cce0050e6722
SSDEEP

12288:UlLMLTHAXoUpkdJAdGyqmqmFrfBCgiw4bivhqGoj85sVPL5qw+DCx:HTgnpwJ+RdqMrfUgYbkhqfj8uqw

Score

1^/10

C:\Users\Admin\AppData\Local\Temp\2024-05-04_7fcb6ce146f02076f5af1f9eefee943f_cobalt-strike_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-04_7fcb6ce146f02076f5af1f9eefee943f_cobalt-strike_ryuk.exe"
1⤵
PID:5080

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=1028 --field-trial-handle=2252,i,16504368816373493055,9578615028378602855,262144 --variations-seed-version /prefetch:8
1⤵
PID:3904

memory/5080-0-0x0000000140000000-0x00000001400F6000-memory.dmp

Filesize
984KB

Download
memory/5080-11-0x0000000003570000-0x00000000035D0000-memory.dmp

Filesize
384KB

Download
memory/5080-7-0x0000000003570000-0x00000000035D0000-memory.dmp

Filesize
384KB

Download
memory/5080-1-0x0000000003570000-0x00000000035D0000-memory.dmp

Filesize
384KB

Download
memory/5080-12-0x0000000140000000-0x00000001400F6000-memory.dmp

Filesize
984KB

Download