Analysis
-
max time kernel
149s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
23-05-2024 00:29
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-23_3632d0b6153598f692aba8f4707fb7fe_cobalt-strike_ryuk.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2024-05-23_3632d0b6153598f692aba8f4707fb7fe_cobalt-strike_ryuk.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-05-23_3632d0b6153598f692aba8f4707fb7fe_cobalt-strike_ryuk.exe
-
Size
796KB
-
MD5
3632d0b6153598f692aba8f4707fb7fe
-
SHA1
0838fe0bd35bb07be27ecf59a0b79b072ba8c81e
-
SHA256
aac7f974c43f83a2be4135c5bb45ad22f55c12582c2cc1a786da4bb9db7eb5d4
-
SHA512
914527720a8126df83575606b6a0d9e489f860ce2ce4770ecc79f763c484ce6354e56c718a92ac7cc59f0d88428ae3d4f7d4eb84b9b481bbbe534a1a84be1627
-
SSDEEP
24576:mANw243aHCks7WE9F5pwg8zmdqQjC60jiHkU:mew25Cks7R9L58UqFJjskU
Malware Config
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1216-6-0x0000000003570000-0x00000000035D0000-memory.dmpFilesize
384KB
-
memory/1216-9-0x0000000003570000-0x00000000035D0000-memory.dmpFilesize
384KB
-
memory/1216-12-0x0000000140000000-0x00000001400CF000-memory.dmpFilesize
828KB
-
memory/1216-0-0x0000000003570000-0x00000000035D0000-memory.dmpFilesize
384KB
-
memory/1216-7-0x0000000140000000-0x00000001400CF000-memory.dmpFilesize
828KB