Analysis

  • max time kernel
    141s
  • max time network
    130s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23-08-2024 13:32

General

  • Target

    2024-08-23_975cd5048ca0d8fd2afff0dda7dbe584_cobalt-strike_ryuk.exe

  • Size

    1.5MB

  • MD5

    975cd5048ca0d8fd2afff0dda7dbe584

  • SHA1

    8aca29bdc3a83c2646e7fb4339227191a583801f

  • SHA256

    123ea7f20b817841168a857873e6ef90db7a89432ccd2d250174c30bc261892e

  • SHA512

    82cc8e97d679776a88f27dd1bbc62c55192f0c0c5c4688411902b203db3343478fb545dcf081f8505aaf2727c14b11b516729249b8031247690802e810c7521d

  • SSDEEP

    24576:ckCoIcbq/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:rIc2LNiXicJFFRGNzj3

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-08-23_975cd5048ca0d8fd2afff0dda7dbe584_cobalt-strike_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-08-23_975cd5048ca0d8fd2afff0dda7dbe584_cobalt-strike_ryuk.exe"
    1⤵
      PID:872

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/872-9-0x0000000000C00000-0x0000000000C60000-memory.dmp

      Filesize

      384KB

    • memory/872-12-0x0000000000C00000-0x0000000000C60000-memory.dmp

      Filesize

      384KB

    • memory/872-6-0x0000000140000000-0x000000014022C000-memory.dmp

      Filesize

      2.2MB

    • memory/872-0-0x0000000000C00000-0x0000000000C60000-memory.dmp

      Filesize

      384KB

    • memory/872-13-0x0000000140000000-0x000000014022C000-memory.dmp

      Filesize

      2.2MB