Analysis
-
max time kernel
0s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
14/08/2024, 15:29
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2024-08-14_8f2eec2e6b8664ae2cbdb148755565fd_cobalt-strike_ryuk.exe
command="C:\Users\Admin\AppData\Local\Temp\2024-08-14_8f2eec2e6b8664ae2cbdb148755565fd_cobalt-strike_ryuk.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
-
Target
2024-08-14_8f2eec2e6b8664ae2cbdb148755565fd_cobalt-strike_ryuk.exe
-
Size
3.6MB
-
MD5
8f2eec2e6b8664ae2cbdb148755565fd
-
SHA1
c45a2e574d5d20c5222aecf2ee921d63e7a0bd4b
-
SHA256
e0345cb41f2be5ff1f27a4fcb72a9b08c81d964ef1192feef332465ff1151c4f
-
SHA512
92fe79c370d8a7d7a54e890163199ecf00336a554d3ce639cb40816b337d8f66ddeac76aee722137d60cbfcc9b36c3809739690cac6096d006005cbdee8e9296
-
SSDEEP
49152:ZlKmwJ00434X6FL9pED6L4QcsY29wjH2vKHlKRLaeJurTfjR7b3E/zDmg27RnWGj:ZfRGcYGbcsYWPI7LE7D527BWG
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-08-14_8f2eec2e6b8664ae2cbdb148755565fd_cobalt-strike_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-08-14_8f2eec2e6b8664ae2cbdb148755565fd_cobalt-strike_ryuk.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.6MB