da0515a95bea5f873169826fd4010d756b13b2002d4b8b32308117d0788a32e1

Analysis

max time kernel
94s
max time network
95s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
18/09/2024, 19:26

Target

2024-09-18_2b5ee8878344f6c3e9d4f99a571ffa96_cobalt-strike_ryuk.exe
Size

1.6MB
MD5

2b5ee8878344f6c3e9d4f99a571ffa96
SHA1

fbefd49f90fdf88f23bd51208358cc9bcd392e88
SHA256

da0515a95bea5f873169826fd4010d756b13b2002d4b8b32308117d0788a32e1
SHA512

b5ab755ddc2748391a9880c21dce23b958f60a2afef2cd68be5606ec31bd4cbe53b8bd9788522b0a25565fdd365e9e77375343d17bc43249b11c86875bbb93e1
SSDEEP

24576:ojCSY6t4COJVTEJ+RHNyBo4kx929bL3Hnx:+JFgpoB+kn3Hnx

Score

1^/10

C:\Users\Admin\AppData\Local\Temp\2024-09-18_2b5ee8878344f6c3e9d4f99a571ffa96_cobalt-strike_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2024-09-18_2b5ee8878344f6c3e9d4f99a571ffa96_cobalt-strike_ryuk.exe"
1⤵
PID:2012

memory/2012-9-0x0000000000D00000-0x0000000000D60000-memory.dmp

Filesize
384KB

Download
memory/2012-8-0x0000000140000000-0x0000000140199000-memory.dmp

Filesize
1.6MB

Download
memory/2012-6-0x0000000000D00000-0x0000000000D60000-memory.dmp

Filesize
384KB

Download
memory/2012-0-0x0000000000D00000-0x0000000000D60000-memory.dmp

Filesize
384KB

Download
memory/2012-12-0x0000000140000000-0x0000000140199000-memory.dmp

Filesize
1.6MB

Download