Analysis
-
max time kernel
0s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
09-08-2024 09:49
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2024-08-09_90ca8f0e16d5896c42fcee0fbed25ce1_cobalt-strike_ryuk.exe
command="C:\Users\Admin\AppData\Local\Temp\2024-08-09_90ca8f0e16d5896c42fcee0fbed25ce1_cobalt-strike_ryuk.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
-
Target
2024-08-09_90ca8f0e16d5896c42fcee0fbed25ce1_cobalt-strike_ryuk.exe
-
Size
2.1MB
-
MD5
90ca8f0e16d5896c42fcee0fbed25ce1
-
SHA1
f4951cd67204bcc22940e556ae520c7204b8ce0f
-
SHA256
ad1e06421868a9416d6442c70250f8d07a071cd74ab7c68108ef479cc8e8a767
-
SHA512
1ce076edc4d84acf969be2107a3542eb623b515bc51aaf63f3dac28b4b4d3adc0ffeb4bacddefb90379d189ba3061e63f40aae171520fd08abb73d7e53aba085
-
SSDEEP
49152:i4O7FQJSk5UdsOIC6qWNlqLH3Ilp2/MCuW:+/LH3INC5
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-08-09_90ca8f0e16d5896c42fcee0fbed25ce1_cobalt-strike_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-08-09_90ca8f0e16d5896c42fcee0fbed25ce1_cobalt-strike_ryuk.exe"1⤵