e15c2c4e6eceada77527ed7de8d5521cd34fed9fcf74f66c8c931f7303aec0b9 | Triage

Analysis

max time kernel
122s
max time network
127s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
14/05/2024, 19:01

Sharing

Report Analysis Logs

General

Target

2024-05-14_a8975635f6859cf104e2e8966c4d8098_cobalt-strike_ryuk.exe
Size

781KB
MD5

a8975635f6859cf104e2e8966c4d8098
SHA1

38972f0f3fef4d2ed7b8a8111022ff92f52587a9
SHA256

e15c2c4e6eceada77527ed7de8d5521cd34fed9fcf74f66c8c931f7303aec0b9
SHA512

9cf61bef0cea45b9f98d195dedf5d9f066e67dab6b3ddcab483c3691973b7a2a3ca34cdc34e332308a309f4a7a10cbcccf34c37e6ab3f246be98f8286d546d11
SSDEEP

12288:YC0P9Q/Jcui6Q+Xq1gYgR+8DAoczI2ZfnwlQTePINayz+ByIne7xmmZjIUTSl+0t:MPsJcui6pMdIuwe3zfIe7xmvH/

Score

1^/10

Malware Config

Signatures

C:\Users\Admin\AppData\Local\Temp\2024-05-14_a8975635f6859cf104e2e8966c4d8098_cobalt-strike_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-14_a8975635f6859cf104e2e8966c4d8098_cobalt-strike_ryuk.exe"
1⤵
PID:2964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2964-0-0x0000000140000000-0x00000001400CA000-memory.dmp

Filesize
808KB

Download
memory/2964-7-0x00000000022E0000-0x0000000002340000-memory.dmp

Filesize
384KB

Download
memory/2964-8-0x00000000022E0000-0x0000000002340000-memory.dmp

Filesize
384KB

Download
memory/2964-13-0x0000000140000000-0x00000001400CA000-memory.dmp

Filesize
808KB

Download
memory/2964-12-0x00000000022E0000-0x0000000002340000-memory.dmp

Filesize
384KB

Download
memory/2964-1-0x00000000022E0000-0x0000000002340000-memory.dmp

Filesize
384KB

Download