630bcddc54959d2c5c8d58b2ef032a48d836c14e4f8652a8eaf17d1fd704722a

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
20/05/2024, 15:06

Target

2024-05-20_a516543367335d3619904b63de41ece4_cobalt-strike_ryuk.exe
Size

796KB
MD5

a516543367335d3619904b63de41ece4
SHA1

aa8da8453bb049c78a8eb77ca39f58e3a5911bd2
SHA256

630bcddc54959d2c5c8d58b2ef032a48d836c14e4f8652a8eaf17d1fd704722a
SHA512

dae50850a9336494159877ce37283aa66283182843c19d959a7f7596de636897614433b79dae82c3cf3af9dd6146b1910c44f634384c84d0619c6837c0ba2eb4
SSDEEP

24576:BANw243v8S+LbzQkWWbCzLLB+lMP1NFzSRY:Bew2y8FD5nb2LLPrFmRY

Score

1^/10

C:\Users\Admin\AppData\Local\Temp\2024-05-20_a516543367335d3619904b63de41ece4_cobalt-strike_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-20_a516543367335d3619904b63de41ece4_cobalt-strike_ryuk.exe"
1⤵
PID:3012

memory/3012-0-0x0000000140000000-0x00000001400CF000-memory.dmp

Filesize
828KB

Download
memory/3012-2-0x0000000002340000-0x00000000023A0000-memory.dmp

Filesize
384KB

Download
memory/3012-9-0x0000000002340000-0x00000000023A0000-memory.dmp

Filesize
384KB

Download
memory/3012-13-0x0000000002340000-0x00000000023A0000-memory.dmp

Filesize
384KB

Download
memory/3012-12-0x0000000140000000-0x00000001400CF000-memory.dmp

Filesize
828KB

Download