Analysis
-
max time kernel
119s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
-
submitted
14-06-2024 13:55
General
-
Target
2024-06-14_844f22fb4d0cced4a7111149fbf4d0a5_cobalt-strike_ryuk.exe
-
Size
796KB
-
MD5
844f22fb4d0cced4a7111149fbf4d0a5
-
SHA1
71972c90cda33436312f6ca125d7479a8b4ebdb9
-
SHA256
fe2a29b88fa8c8f7f4aa427a95c8fe5cdc92aa80e3c44c1ea355310efc7bb1e5
-
SHA512
3e4b88de3214d22ce2eccae65b2d62706598173b6b2d42197e8a4ce5d2a58d826dca28980c4052a25810be7507262743132f24e9159729a997c418d2cee054a5
-
SSDEEP
24576:tANw243nRWAQhe8yBIVODCq76ohuk783OEZ/3yOg9ART:tew2kMT8aYDp7JhN83T3g4
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-14_844f22fb4d0cced4a7111149fbf4d0a5_cobalt-strike_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-14_844f22fb4d0cced4a7111149fbf4d0a5_cobalt-strike_ryuk.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
828KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
828KB