7e3019790fa87fde1d3ed2c4728966b68255e82fa82a713415feadd5fb10bc5d

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
20/08/2024, 22:23

Target

2024-08-20_d53b1502565fc3d6ae04ce7a612857a7_cobalt-strike_ryuk.exe
Size

2.2MB
MD5

d53b1502565fc3d6ae04ce7a612857a7
SHA1

4de267feada933504f4fa01379ac7255481c2883
SHA256

7e3019790fa87fde1d3ed2c4728966b68255e82fa82a713415feadd5fb10bc5d
SHA512

c3ca5d83ae955abe083aa1ec82403af9d9db7954298d6cf6efbbc6bf8997febf44bf2962bad44de49f7a5ceb257b90e7094b4a952537ae76253b382c34dffaea
SSDEEP

49152:yXwPxqvV7A8s+GNx3bFqe4+GLDdxECagwFIo:Qgqts+3/DdeCTo

Score

1^/10

C:\Users\Admin\AppData\Local\Temp\2024-08-20_d53b1502565fc3d6ae04ce7a612857a7_cobalt-strike_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2024-08-20_d53b1502565fc3d6ae04ce7a612857a7_cobalt-strike_ryuk.exe"
1⤵
PID:4048

memory/4048-0-0x0000000000890000-0x00000000008F0000-memory.dmp

Filesize
384KB

Download
memory/4048-9-0x0000000000890000-0x00000000008F0000-memory.dmp

Filesize
384KB

Download
memory/4048-12-0x0000000000890000-0x00000000008F0000-memory.dmp

Filesize
384KB

Download
memory/4048-13-0x0000000140000000-0x0000000140247000-memory.dmp

Filesize
2.3MB

Download
memory/4048-8-0x0000000140000000-0x0000000140247000-memory.dmp

Filesize
2.3MB

Download