Analysis
-
max time kernel
119s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
-
submitted
24-08-2024 21:44
General
-
Target
2024-08-24_fe8a1063df70259cdd9e85ec4b3b8f99_cobalt-strike_ryuk.exe
-
Size
2.2MB
-
MD5
fe8a1063df70259cdd9e85ec4b3b8f99
-
SHA1
d257714f9e74cffad34ad2dd9d786aae210e982f
-
SHA256
18b79f41ab4f01c5d26f3acb88c62a5aee33b64f4b2e0079b33739c321847a38
-
SHA512
4571899fca490f2ed2e2b86ae00d20065c6f6555e8225efc2704781b6b1d652426fa4a149fe3312494267c22423e2995bd6223aacf084e18b17c2eee68d87119
-
SSDEEP
49152:9y7mTd0GxN8jyyncHjXKUyn4GVcbDSKrNTxpDmg27RnWGj:omYeycHjWjMTpD527BWG
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-08-24_fe8a1063df70259cdd9e85ec4b3b8f99_cobalt-strike_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-08-24_fe8a1063df70259cdd9e85ec4b3b8f99_cobalt-strike_ryuk.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.3MB
-
Filesize
384KB