Analysis
-
max time kernel
118s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
28/05/2024, 18:13
General
-
Target
2024-05-28_87426ad4d880616cd6247b62d1f03d6c_cobalt-strike_ryuk.exe
-
Size
796KB
-
MD5
87426ad4d880616cd6247b62d1f03d6c
-
SHA1
b87c5540b6363158c1e4f724fa75ee5f10018838
-
SHA256
95ae41be6ae7ab7884c4adf5914aba41c71e05b39074bcffcbd2e0280ba0f5c7
-
SHA512
c5afad27a87469ecba6a8354a997f957aa4b3b48894fb6bad7e7a4e1209fc92ce539a184625e94b8c95c9728428008cb901d559b7e9181ac69a3e9768268db16
-
SSDEEP
12288:jXDCAZzP/w24lhVJlARaGdf1IrOrNhyRfLz707YH7lk9wl225CnPkKb5rdRYd:yANw243VvoKFLgYHJWwl24C15rDY
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-28_87426ad4d880616cd6247b62d1f03d6c_cobalt-strike_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-28_87426ad4d880616cd6247b62d1f03d6c_cobalt-strike_ryuk.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
828KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
828KB