Analysis
-
max time kernel
0s -
max time network
6s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
01/09/2024, 10:09
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2024-09-01_f28cdb55587150a5560f17848bcb393d_cobalt-strike_ryuk.exe
command="C:\Users\Admin\AppData\Local\Temp\2024-09-01_f28cdb55587150a5560f17848bcb393d_cobalt-strike_ryuk.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
-
Target
2024-09-01_f28cdb55587150a5560f17848bcb393d_cobalt-strike_ryuk.exe
-
Size
4.3MB
-
MD5
f28cdb55587150a5560f17848bcb393d
-
SHA1
e20aa468538e7c41213feed2d7139bf6e2fd43d3
-
SHA256
231a232b0bac5b3a348b14f868a630ae785d10f470f0d5343518091306dfb9d2
-
SHA512
a05c80635e68834afe6b2467813ab71e7d5524fb54c62716e077bfea43a8a53ceb61e54d3e7eb147faaba5d7f718aab08149044addd52a90304a6055313649f8
-
SSDEEP
49152:bTLjTRawNIs3J+qHCbKgOmsISbBydOT+70Vau545K0wDMB7q:bjKXOmVEysowDS7q
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-09-01_f28cdb55587150a5560f17848bcb393d_cobalt-strike_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-09-01_f28cdb55587150a5560f17848bcb393d_cobalt-strike_ryuk.exe"1⤵