Analysis
-
max time kernel
120s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
27-05-2024 12:26
General
-
Target
2024-05-27_2ec6827dc0cc46b524d22fc83caa1a92_cobalt-strike_ryuk.exe
-
Size
796KB
-
MD5
2ec6827dc0cc46b524d22fc83caa1a92
-
SHA1
408310bb947592d2b398c24272fd0fbdb0ad86b4
-
SHA256
c75cb9631f51d845c1ca3697cb81337dc6282d75320514b4a4f7d94f51beea6a
-
SHA512
2ad54e91823282f1f94b016bb894e280eb4a7525cb5aca360d8a4bbc42b72f17ab859663abc4694ba68d8a8c28068a72c4f3800d6a2ceaa8d0b7dc0c4df0e853
-
SSDEEP
12288:dXDCAZzP/w24lhpJlARaGdf1IrOrNhyRfLz707YH7lk9wl225CnPkKb5rdRYd:4ANw243pvoKFLgYHJWwl24C15rDY
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-27_2ec6827dc0cc46b524d22fc83caa1a92_cobalt-strike_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-27_2ec6827dc0cc46b524d22fc83caa1a92_cobalt-strike_ryuk.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
828KB
-
Filesize
384KB
-
Filesize
828KB