Analysis
-
max time kernel
120s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
11/06/2024, 08:06
General
-
Target
2024-06-11_f93e38f2f9db8c50421a54ca4a63c627_cobalt-strike_ryuk.exe
-
Size
946KB
-
MD5
f93e38f2f9db8c50421a54ca4a63c627
-
SHA1
c842d8b1cc8004b657547671892afad7dafb9d94
-
SHA256
3ed9dfc6067edf9107dfd93dc8221c48bbfc5ae2bbe262c90e661ce5a426e516
-
SHA512
b0730d0fbc00e6c8ef991ff1031d90f6d6e4858e643b33b82539cf10fc9ead8d648fed2be624eebbff2068decb086fd3316dac49d297ae78a3bb1e1e291cc068
-
SSDEEP
24576:FTgnpwJ+RL2JOt934J7Z6bQaj1BvUm9J:B0daJE3jM2ce
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-11_f93e38f2f9db8c50421a54ca4a63c627_cobalt-strike_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-11_f93e38f2f9db8c50421a54ca4a63c627_cobalt-strike_ryuk.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
984KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
984KB