Overview

overview

3

Static

static

3

2024-09-06...uk.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    96s
  • max time network
    97s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06-09-2024 05:23

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2024-09-06_4eb348dd4db7ede6926a8e185e6d86a9_cobalt-strike_ryuk.exe

  • Size

    1.8MB

  • MD5

    4eb348dd4db7ede6926a8e185e6d86a9

  • SHA1

    7e988339d0f3015f95396d22c8387e6dd052541a

  • SHA256

    638d28dd3dca3fb2e3c3717438bda0c6863da664318675da75b815feeed28d1d

  • SHA512

    84ef8698d63fc9647c2882ee6880b530a13b7b3805ef55d7a580e155bea1e9e86078ee0c98d352df68f5eb44e4df8ff28b19766e280d776b8efe661be66fa992

  • SSDEEP

    24576:2Z9SKxWTcQzuXxN3iVfUhSalcFbG7jMUAUbLMevZesQ4+nOXVG:2ZWLsxxEUzOf9kAe9+OE

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-09-06_4eb348dd4db7ede6926a8e185e6d86a9_cobalt-strike_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-09-06_4eb348dd4db7ede6926a8e185e6d86a9_cobalt-strike_ryuk.exe"
    1⤵
      PID:832

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/832-0-0x0000000140000000-0x00000001401D7000-memory.dmp

      Filesize

      1.8MB

      Download

    • memory/832-7-0x0000000001F90000-0x0000000001FF0000-memory.dmp

      Filesize

      384KB

      Download

    • memory/832-1-0x0000000001F90000-0x0000000001FF0000-memory.dmp

      Filesize

      384KB

      Download

    • memory/832-9-0x0000000001F90000-0x0000000001FF0000-memory.dmp

      Filesize

      384KB

      Download

    • memory/832-12-0x0000000140000000-0x00000001401D7000-memory.dmp

      Filesize

      1.8MB

      Download