Analysis
-
max time kernel
0s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
24-07-2024 01:22
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2024-07-24_32f640e118f7f1afb47f16388a56c85e_cobalt-strike_ryuk.exe
command="C:\Users\Admin\AppData\Local\Temp\2024-07-24_32f640e118f7f1afb47f16388a56c85e_cobalt-strike_ryuk.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
-
Target
2024-07-24_32f640e118f7f1afb47f16388a56c85e_cobalt-strike_ryuk.exe
-
Size
1.7MB
-
MD5
32f640e118f7f1afb47f16388a56c85e
-
SHA1
427e732f096e59e91c4a79b006820d0f4eb01a25
-
SHA256
15baab99718b4dd37525f8ebf5a69bf47bc85a13d2ce0abe544b434be740aa44
-
SHA512
79bca276696e561e5f6704d5895f0a25b20b6665065f57148ebf9ba77bec813b6bca83cef74f701478337ecdf2edd38adc9f7fb302962c8ee21b9dae674edca3
-
SSDEEP
24576:ccLcX+ROEEZicD6izxBCB/Iv4kE4Gfn4gu2JOt934J7Z6bQaj1BvUm9J:D6aOEEZJu2xgBA6NJE3jM2ce
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-07-24_32f640e118f7f1afb47f16388a56c85e_cobalt-strike_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-07-24_32f640e118f7f1afb47f16388a56c85e_cobalt-strike_ryuk.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.8MB