Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
23-05-2024 00:29
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-23_3632d0b6153598f692aba8f4707fb7fe_cobalt-strike_ryuk.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-05-23_3632d0b6153598f692aba8f4707fb7fe_cobalt-strike_ryuk.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-05-23_3632d0b6153598f692aba8f4707fb7fe_cobalt-strike_ryuk.exe
-
Size
796KB
-
MD5
3632d0b6153598f692aba8f4707fb7fe
-
SHA1
0838fe0bd35bb07be27ecf59a0b79b072ba8c81e
-
SHA256
aac7f974c43f83a2be4135c5bb45ad22f55c12582c2cc1a786da4bb9db7eb5d4
-
SHA512
914527720a8126df83575606b6a0d9e489f860ce2ce4770ecc79f763c484ce6354e56c718a92ac7cc59f0d88428ae3d4f7d4eb84b9b481bbbe534a1a84be1627
-
SSDEEP
24576:mANw243aHCks7WE9F5pwg8zmdqQjC60jiHkU:mew25Cks7R9L58UqFJjskU
Malware Config
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1676-0-0x0000000002310000-0x0000000002370000-memory.dmpFilesize
384KB
-
memory/1676-6-0x0000000140000000-0x00000001400CF000-memory.dmpFilesize
828KB
-
memory/1676-13-0x0000000140000000-0x00000001400CF000-memory.dmpFilesize
828KB
-
memory/1676-12-0x0000000002310000-0x0000000002370000-memory.dmpFilesize
384KB
-
memory/1676-8-0x0000000002310000-0x0000000002370000-memory.dmpFilesize
384KB
-
memory/1676-7-0x0000000002310000-0x0000000002370000-memory.dmpFilesize
384KB