Analysis
-
max time kernel
0s -
max time network
0s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
13/08/2024, 16:01
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2024-08-13_bdebb11f6da23d00def98292ecf64f06_cobalt-strike_ryuk.exe
command="C:\Users\Admin\AppData\Local\Temp\2024-08-13_bdebb11f6da23d00def98292ecf64f06_cobalt-strike_ryuk.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
-
Target
2024-08-13_bdebb11f6da23d00def98292ecf64f06_cobalt-strike_ryuk.exe
-
Size
1.6MB
-
MD5
bdebb11f6da23d00def98292ecf64f06
-
SHA1
c2e3385d66d2f68289a5df6f8365f0c1595d5181
-
SHA256
a5160fd0980334635cba23a6efd9fdf5f05afb98898a3b872aef2a970f73d916
-
SHA512
9ca3d02a1c8009b66a7ec312a1748decb47e0645a14034942429f6490d15ad1c124c996e89d1f78ca450ef78e32c027997fb3553b33bd8efa19631b04dddd5db
-
SSDEEP
24576:fPxXh8qZZuu/DtFy/e/HAuzlOpZeT3WtmaouGSPGM9ZQ8GYelhwOXGEDgm6:fBuq6eDtM/6HAMl0dPGM7nmoOl
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-08-13_bdebb11f6da23d00def98292ecf64f06_cobalt-strike_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-08-13_bdebb11f6da23d00def98292ecf64f06_cobalt-strike_ryuk.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.7MB