Analysis

  • max time kernel
    93s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    29-06-2024 11:21

General

  • Target

    2024-06-29_b9224e0bccebc6cf524eb887e07e826c_cobalt-strike_ryuk.exe

  • Size

    946KB

  • MD5

    b9224e0bccebc6cf524eb887e07e826c

  • SHA1

    bfbd5fcb0e9bfd5d06533771a98cd75f79432c38

  • SHA256

    e9b81cdd54c2b6892ce06d9317aaf7aadf3ffc1b3773a37a7fd04e5b70268a1a

  • SHA512

    52213eebb6b45d73ca861f4c87b599c279cebdf98786b1054206da1252e518d76d27d3d3f3356d47628ee53aefc8ec645e7d889726af18611d16259a4067c481

  • SSDEEP

    24576:GTgnpwJ+RNWHRlMugdD+JsRgZRJ4fM430Eg6nET7M/IiN:+0dQxlMPdlR8v4UC0Eg6ET7M/I

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-06-29_b9224e0bccebc6cf524eb887e07e826c_cobalt-strike_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-06-29_b9224e0bccebc6cf524eb887e07e826c_cobalt-strike_ryuk.exe"
    1⤵
      PID:3564

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3564-0-0x0000000140000000-0x00000001400F6000-memory.dmp

      Filesize

      984KB

    • memory/3564-1-0x0000000002D90000-0x0000000002DF0000-memory.dmp

      Filesize

      384KB

    • memory/3564-7-0x0000000002D90000-0x0000000002DF0000-memory.dmp

      Filesize

      384KB

    • memory/3564-9-0x0000000002D90000-0x0000000002DF0000-memory.dmp

      Filesize

      384KB

    • memory/3564-11-0x00007FFC17460000-0x00007FFC175B6000-memory.dmp

      Filesize

      1.3MB

    • memory/3564-12-0x0000000140000000-0x00000001400F6000-memory.dmp

      Filesize

      984KB