efe6a2e8816a698555b17f604d8da61218840290dce67fda1fe6741274d0b91e

Analysis

max time kernel
121s
max time network
126s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
01/06/2024, 07:06

Target

2024-06-01_02a7eba963f1dcd5ee5321aee5fa9e07_cobalt-strike_ryuk.exe
Size

796KB
MD5

02a7eba963f1dcd5ee5321aee5fa9e07
SHA1

5998d53aa52172107ef9c0e807f954f20283e90e
SHA256

efe6a2e8816a698555b17f604d8da61218840290dce67fda1fe6741274d0b91e
SHA512

d40f0d3f330b0a737c0c53d7289f70f8b7986ab92b4065651719ae900375c736f18bb1e1c0ba5a2b9df6b4cdc345a020c42a0f426dcbb498b814712db7f1f1f2
SSDEEP

24576:JANw243A7ozX0j52pMkuLoiSJVlIL29mhNq6:Jew2470jIpM3kiSBM29mhNq

Score

1^/10

C:\Users\Admin\AppData\Local\Temp\2024-06-01_02a7eba963f1dcd5ee5321aee5fa9e07_cobalt-strike_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2024-06-01_02a7eba963f1dcd5ee5321aee5fa9e07_cobalt-strike_ryuk.exe"
1⤵
PID:2196

memory/2196-7-0x00000000022F0000-0x0000000002350000-memory.dmp

Filesize
384KB

Download
memory/2196-1-0x00000000022F0000-0x0000000002350000-memory.dmp

Filesize
384KB

Download
memory/2196-11-0x0000000140000000-0x00000001400CF000-memory.dmp

Filesize
828KB

Download
memory/2196-9-0x00000000022F0000-0x0000000002350000-memory.dmp

Filesize
384KB

Download
memory/2196-0-0x0000000140000000-0x00000001400CF000-memory.dmp

Filesize
828KB

Download