Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
21-05-2024 15:59
General
-
Target
2024-05-21_d1f746b92d0ea2ac0a66f799e73cf49a_cobalt-strike_ryuk.exe
-
Size
796KB
-
MD5
d1f746b92d0ea2ac0a66f799e73cf49a
-
SHA1
82ca87fa56b3294e4fedd5b6639a89800e5fc657
-
SHA256
85d8cc2b3866fcc879978467b57595b26ffebeb550b8821b46c5332e1eea1eaa
-
SHA512
ddfcb99211bba2891128f6581834ddfa0177ae1834f69a2033e3dee2d6cd62088d3cedcf8af7725a55dfccc40e50151508a83f40e45301173ab74b09ed5a7cf5
-
SSDEEP
24576:EANw243l6LaRFdGJm0Q3WKVSwdr13Ek0VA:Eew2q6KFdi2Ga9x3Ek0V
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-21_d1f746b92d0ea2ac0a66f799e73cf49a_cobalt-strike_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-21_d1f746b92d0ea2ac0a66f799e73cf49a_cobalt-strike_ryuk.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
828KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
828KB