227e982c13ed19b6954e54712330740ffc4c72eda5e6082c3d62f39f9ffe4c95

Analysis

max time kernel
93s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
28/05/2024, 17:04

Target

2024-05-28_5d28aa141eb960a732e19d04cd1c5873_cobalt-strike_ryuk.exe
Size

946KB
MD5

5d28aa141eb960a732e19d04cd1c5873
SHA1

b58a5093bd2706c88a241ae92b102201bd524ded
SHA256

227e982c13ed19b6954e54712330740ffc4c72eda5e6082c3d62f39f9ffe4c95
SHA512

5b7312d8d1dd03762f2efc61e3d39e67dc82d35af13a7d77a18c0658594fafe22916f3a94a84bea81adb841cf8b1c4952431514f7df11db97aa9e612eec16def
SSDEEP

24576:GTgnpwJ+RCt/sBlDqgZQd6XKtiMJYiPU:+0d4/snji6attJM

Score

1^/10

C:\Users\Admin\AppData\Local\Temp\2024-05-28_5d28aa141eb960a732e19d04cd1c5873_cobalt-strike_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-28_5d28aa141eb960a732e19d04cd1c5873_cobalt-strike_ryuk.exe"
1⤵
PID:1956

memory/1956-8-0x0000000140000000-0x00000001400F6000-memory.dmp

Filesize
984KB

Download
memory/1956-9-0x0000000002D70000-0x0000000002DD0000-memory.dmp

Filesize
384KB

Download
memory/1956-6-0x0000000002D70000-0x0000000002DD0000-memory.dmp

Filesize
384KB

Download
memory/1956-12-0x0000000140000000-0x00000001400F6000-memory.dmp

Filesize
984KB

Download
memory/1956-0-0x0000000002D70000-0x0000000002DD0000-memory.dmp

Filesize
384KB

Download