Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    18-09-2024 19:26

General

  • Target

    2024-09-18_2b5ee8878344f6c3e9d4f99a571ffa96_cobalt-strike_ryuk.exe

  • Size

    1.6MB

  • MD5

    2b5ee8878344f6c3e9d4f99a571ffa96

  • SHA1

    fbefd49f90fdf88f23bd51208358cc9bcd392e88

  • SHA256

    da0515a95bea5f873169826fd4010d756b13b2002d4b8b32308117d0788a32e1

  • SHA512

    b5ab755ddc2748391a9880c21dce23b958f60a2afef2cd68be5606ec31bd4cbe53b8bd9788522b0a25565fdd365e9e77375343d17bc43249b11c86875bbb93e1

  • SSDEEP

    24576:ojCSY6t4COJVTEJ+RHNyBo4kx929bL3Hnx:+JFgpoB+kn3Hnx

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-09-18_2b5ee8878344f6c3e9d4f99a571ffa96_cobalt-strike_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-09-18_2b5ee8878344f6c3e9d4f99a571ffa96_cobalt-strike_ryuk.exe"
    1⤵
      PID:2376

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2376-6-0x0000000140000000-0x0000000140199000-memory.dmp

      Filesize

      1.6MB

    • memory/2376-0-0x00000000008E0000-0x0000000000940000-memory.dmp

      Filesize

      384KB

    • memory/2376-7-0x00000000008E0000-0x0000000000940000-memory.dmp

      Filesize

      384KB

    • memory/2376-12-0x0000000140000000-0x0000000140199000-memory.dmp

      Filesize

      1.6MB

    • memory/2376-9-0x00000000008E0000-0x0000000000940000-memory.dmp

      Filesize

      384KB