Analysis
-
max time kernel
93s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
06/08/2024, 22:23
General
-
Target
2024-08-06_8927522c8fd34a197c1f2e7db3e9c44c_cobalt-strike_ryuk.exe
-
Size
2.3MB
-
MD5
8927522c8fd34a197c1f2e7db3e9c44c
-
SHA1
7c79f73aed55fb803bd6b05f4d41cd120ad831aa
-
SHA256
4a4a7fe526d09406875f3170f588dcefc8cf890de39742622143a78c565beb1c
-
SHA512
c9ce28cfe2cb7edc9604d09432e6431f8ca68e681630ca675f5980dc3bc290577a278ae1c59c952a66151f23778889cf50c640fbd7fc6288efb4e4b9661c5a2d
-
SSDEEP
49152:YTizU5DZ9CAEriTDj8q3s5VfgJdFB8yzGI0LrO:AizU5N9LOf0dFB8DjLr
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-08-06_8927522c8fd34a197c1f2e7db3e9c44c_cobalt-strike_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-08-06_8927522c8fd34a197c1f2e7db3e9c44c_cobalt-strike_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.4MB
-
Filesize
2.4MB