Analysis
-
max time kernel
0s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
22/07/2024, 17:46
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2024-07-22_7a4e795909cfcff5ddf301d97c82c378_cobalt-strike_ryuk.exe
command="C:\Users\Admin\AppData\Local\Temp\2024-07-22_7a4e795909cfcff5ddf301d97c82c378_cobalt-strike_ryuk.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
-
Target
2024-07-22_7a4e795909cfcff5ddf301d97c82c378_cobalt-strike_ryuk.exe
-
Size
1.6MB
-
MD5
7a4e795909cfcff5ddf301d97c82c378
-
SHA1
e541487b60876857ed4cf7507b7f9979bcd550c1
-
SHA256
d9261d4cea7b342808823da57ff6d2fa67878df0afa25976a51488d8063e9419
-
SHA512
092b18018dbcde7d786039e46787aa5cb83ed539882cf3cc4f32ef648860ef89c83a8ca2a5f1dd2834594ec712a447d60079ef0c185bb7845e242d2cb5440a60
-
SSDEEP
24576:IH8U+SAYa2zFMRzEVwBA1cuMjMQ+zTZYre/i328ab4F+rM/aXq6bJfBUam6:IcUBxFMRzEQA13MgL/5/i3da1YS6ozB
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-07-22_7a4e795909cfcff5ddf301d97c82c378_cobalt-strike_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-07-22_7a4e795909cfcff5ddf301d97c82c378_cobalt-strike_ryuk.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB