cobaltstrike | 5bea4028b99ab2708fff4512578311052755890acb018d5b65b1455193c7f71e

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
25/07/2024, 09:57

Target
2024-07-25_9b6915df01b82145ecf93b717df7af85_cobalt-strike_ryuk.exe
Size 224KB
Sample240725-lzdvjsvdph
SHA256 5bea4028b99ab2708fff4512578311052755890acb018d5b65b1455193c7f71e
MD5 9b6915df01b82145ecf93b717df7af85
SHA1 0c788ce9bb0cab7544acb6e6dd09c911354d7204
SHA512 6a9b793f009d8ad43b566f9d444111b74ab53ebf861811dafb39051897608e65a6e245105bf4a1bf4af2545cbf6cb57b8d7289eab377e0fdc3b0729774029786
SSDEEP 3072:2tenit+HYNijlnD5uPEw4EXWq/faB4ymKFYVnXGfbR/k7bY8Juyu/0h4:2rQuij9toE6nfPymKuXGcJWs
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Family

Attributes

Cobaltstrike
Detected malicious payload which is part of Cobaltstrike.
trojan backdoor cobaltstrike

C:\Users\Admin\AppData\Local\Temp\2024-07-25_9b6915df01b82145ecf93b717df7af85_cobalt-strike_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2024-07-25_9b6915df01b82145ecf93b717df7af85_cobalt-strike_ryuk.exe"
1⤵
PID:4328