498360b4025f2a2f2a4a6658568762bc86e1ed82b7101970af0eab6446679324

Analysis

max time kernel
132s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03-06-2024 18:08

Target

2024-06-03_901bb4448f54c38377684738c59f1b45_cobalt-strike_ryuk.exe
Size

946KB
MD5

901bb4448f54c38377684738c59f1b45
SHA1

2faaa085e90d6c1cc1db744e250c0f8c715272f6
SHA256

498360b4025f2a2f2a4a6658568762bc86e1ed82b7101970af0eab6446679324
SHA512

2273229c4a65bba615b6660f19f31a5b9ca0b59c1fe2841ea3a40e93e0d04010dda046189944a741740a2fc8f922e25ece055f0121a388c39e146ded1f85004d
SSDEEP

24576:yTgnpwJ+ROVg9N9JMlDlfjRiVuVsWt5MJMs+:a0dKgFIDRRAubt5M

Score

1^/10

C:\Users\Admin\AppData\Local\Temp\2024-06-03_901bb4448f54c38377684738c59f1b45_cobalt-strike_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2024-06-03_901bb4448f54c38377684738c59f1b45_cobalt-strike_ryuk.exe"
1⤵
PID:4824

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4160,i,11746347647270949551,7786733067759450703,262144 --variations-seed-version --mojo-platform-channel-handle=4016 /prefetch:8
1⤵
PID:3104

memory/4824-1-0x0000000003590000-0x00000000035F0000-memory.dmp

Filesize
384KB

Download
memory/4824-9-0x0000000003590000-0x00000000035F0000-memory.dmp

Filesize
384KB

Download
memory/4824-8-0x0000000140000000-0x00000001400F6000-memory.dmp

Filesize
984KB

Download
memory/4824-7-0x0000000003590000-0x00000000035F0000-memory.dmp

Filesize
384KB

Download