Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
03/06/2024, 01:23
General
-
Target
2024-06-03_b5629e3dbb4fb6cec6bcc45bb972f678_cobalt-strike_ryuk.exe
-
Size
781KB
-
MD5
b5629e3dbb4fb6cec6bcc45bb972f678
-
SHA1
a9b6f11529cb5a52e3e9ffa78dd9ceb6387fad3b
-
SHA256
d782a8e6856e78e909df19724fa03350934eaf69636def16c8e242e101d40d2c
-
SHA512
57a567a3de4c10dd19e4884b4124e1257e95d7113f231e54a29af6612aab07d1c0cf6b0bed46082496a26c524af84b39a5a179af8a1dbe15b21226f9a9dc9d70
-
SSDEEP
24576:oPsJcuij8NDFKYmKOF0zr31JwAlcR3QC0OXxc0H:owcuugDUYmvFur31yAipQCtXxc0H
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-03_b5629e3dbb4fb6cec6bcc45bb972f678_cobalt-strike_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-03_b5629e3dbb4fb6cec6bcc45bb972f678_cobalt-strike_ryuk.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
808KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
808KB