1c2e3c5b1b22b1dc52a3c78c3196c5cff0b3a41d2983a829d5de9de21d258d44

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
27/05/2024, 15:28

Target

2024-05-27_21dafa11e7b66218147b596386d1454c_cobalt-strike_ryuk.exe
Size

796KB
MD5

21dafa11e7b66218147b596386d1454c
SHA1

db9149705a76e4ff7ca435e4ed26ad720f8b60fd
SHA256

1c2e3c5b1b22b1dc52a3c78c3196c5cff0b3a41d2983a829d5de9de21d258d44
SHA512

0dc5314fce9bf644511512a00e1921043bf262e27e2c175bc679a85e2b63828911911557a39e9a5accc8a1213c4ecc159d4cfce6f3a578eee2f923ef9d612ecd
SSDEEP

24576:bANw243k/i328ab4F+rM/aXq6bJfBUam6:bew2x/i3da1YS6ozB

Score

1^/10

C:\Users\Admin\AppData\Local\Temp\2024-05-27_21dafa11e7b66218147b596386d1454c_cobalt-strike_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-27_21dafa11e7b66218147b596386d1454c_cobalt-strike_ryuk.exe"
1⤵
PID:1576

memory/1576-13-0x0000000140000000-0x00000001400CF000-memory.dmp

Filesize
828KB

Download
memory/1576-12-0x0000000000B30000-0x0000000000B90000-memory.dmp

Filesize
384KB

Download
memory/1576-6-0x0000000140000000-0x00000001400CF000-memory.dmp

Filesize
828KB

Download
memory/1576-0-0x0000000000B30000-0x0000000000B90000-memory.dmp

Filesize
384KB

Download
memory/1576-9-0x0000000000B30000-0x0000000000B90000-memory.dmp

Filesize
384KB

Download