Analysis
-
max time kernel
120s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
-
submitted
01/07/2024, 18:24
General
-
Target
2024-07-01_d0cbc4a822f7d0a486dda52f3fc9af5d_cobalt-strike_ryuk.exe
-
Size
796KB
-
MD5
d0cbc4a822f7d0a486dda52f3fc9af5d
-
SHA1
e89f9072248e41d70927248bb361c7aa7df8de5d
-
SHA256
883a72dd684464cce8287d1093d2e10699db88cc63b08d7810d78e2d40ff72da
-
SHA512
9be48b4a91596d950aebfdb461cb892378af0984a5a4837c2e129dd40f36c94b566f900bf9e10c499eaf0843a50f70eda9b0ee1e1992e00a4aebad66f376747e
-
SSDEEP
24576:PANw243QZiUJXca/VQBIe2dhi8OP3YGv:Pew2P9TQHj3D
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-07-01_d0cbc4a822f7d0a486dda52f3fc9af5d_cobalt-strike_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-07-01_d0cbc4a822f7d0a486dda52f3fc9af5d_cobalt-strike_ryuk.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
828KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
828KB