Analysis

  • max time kernel
    133s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/08/2024, 00:42

General

  • Target

    2024-08-23_5137b8787bc9e97ecdd5b1d0de041561_cobalt-strike_ryuk.exe

  • Size

    6.7MB

  • MD5

    5137b8787bc9e97ecdd5b1d0de041561

  • SHA1

    253e48a11cfca2aabd300a7ec603adf7d9defc42

  • SHA256

    8247abe7faf299f3456f1272b15024136403195d1989a85367923528ba6a3e67

  • SHA512

    7cda6a5a522788ac1d30b1899193e4088fd1d797e3e271864fb9674b4ee67df0ff6900d570c7c987ae0e89f6b77be454a41674b9334f42b30aee65225d18f4f1

  • SSDEEP

    98304:KCoHkITJV3tJseJDaocQ17UpJzrX4yzWubPPBkWT:ZckuV3t+eJDaiM

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-08-23_5137b8787bc9e97ecdd5b1d0de041561_cobalt-strike_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-08-23_5137b8787bc9e97ecdd5b1d0de041561_cobalt-strike_ryuk.exe"
    1⤵
      PID:2988

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads