Analysis
-
max time kernel
0s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
07/08/2024, 22:41
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2024-08-07_09281c8682f6fecff642a718a5cfb77a_cobalt-strike_ryuk.exe
command="C:\Users\Admin\AppData\Local\Temp\2024-08-07_09281c8682f6fecff642a718a5cfb77a_cobalt-strike_ryuk.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
-
Target
2024-08-07_09281c8682f6fecff642a718a5cfb77a_cobalt-strike_ryuk.exe
-
Size
1.6MB
-
MD5
09281c8682f6fecff642a718a5cfb77a
-
SHA1
c7055a0f8893b3fe65dd21d971272f68ccda50d1
-
SHA256
ae9f1d9f4d09012a5c74601fe69c6d304b7d3b5c4b864c4470897db5dccb17e3
-
SHA512
62e4aa09ff90af4c0ed4598b5c20e1a2ba2a6dcd267465ab3d26ce3a93dfaed01d5a1f7bfba3b8b9ac039c196f2cd9e8062d3fb719943d4cdc75a3b4d9b7ce70
-
SSDEEP
24576:nPxXh8qZZuu/KtFy/e/HAuzlOpZeT3WQPLfnkQRoosMxviufuq+d5Ubgm34:nBuq6eKtM/6HAMlnznkQlhF2Ebj
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-08-07_09281c8682f6fecff642a718a5cfb77a_cobalt-strike_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-08-07_09281c8682f6fecff642a718a5cfb77a_cobalt-strike_ryuk.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.7MB