Analysis
-
max time kernel
0s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
22-08-2024 15:21
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2024-08-22_87f565cba3f441bb73b05833ba559263_cobalt-strike_ryuk.exe
command="C:\Users\Admin\AppData\Local\Temp\2024-08-22_87f565cba3f441bb73b05833ba559263_cobalt-strike_ryuk.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
-
Target
2024-08-22_87f565cba3f441bb73b05833ba559263_cobalt-strike_ryuk.exe
-
Size
3.7MB
-
MD5
87f565cba3f441bb73b05833ba559263
-
SHA1
e4c4636e16f125dad1c908110626876fc64a7c6c
-
SHA256
b471c4e0383e021bf9d0a53cadda487566dcf5a75fbb517a53865a2fa2c200ca
-
SHA512
d03a2bd34984fba3757723dc9c487ca71dd3843bcd33f038bd91200dec561119573c1b77e4bff38c4639ff91f3f614ff7a128e887b78d57dce3b8c35405bce75
-
SSDEEP
49152:qVvcXDsMW3O21oEmlyMt5aJWi32yMRDWpdoblg7XgNv0GZkIOhiyWX+2y/BS:P4yht5aJVFpeVv0RkX+U
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-08-22_87f565cba3f441bb73b05833ba559263_cobalt-strike_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-08-22_87f565cba3f441bb73b05833ba559263_cobalt-strike_ryuk.exe"1⤵