957373825d02462531b53c8b108350b7b8696e9584b3709fd35831e4f5d7d74e

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
05/10/2024, 20:13

Target

2024-10-05_e337e46f7fbad06154433d1fa337917a_cobalt-strike_ryuk.exe
Size

2.8MB
MD5

e337e46f7fbad06154433d1fa337917a
SHA1

60177b29d231cbdc85741c6e4077802026320925
SHA256

957373825d02462531b53c8b108350b7b8696e9584b3709fd35831e4f5d7d74e
SHA512

3d7a6f10ec787d8b6796e2e7b0ba39f42f6ea816a3b25be5c84a369c8d01fe773f4a690191121d3e038c84df2a5f823479388adcd790ecdfab69d29e422656eb
SSDEEP

49152:EKMnnsml9RqYurSuo77DjicRbOTDoZ4QDp4dIzuDmg27RnWGj:z2RWoPicRaHvD527BWG

Score

1^/10

C:\Users\Admin\AppData\Local\Temp\2024-10-05_e337e46f7fbad06154433d1fa337917a_cobalt-strike_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2024-10-05_e337e46f7fbad06154433d1fa337917a_cobalt-strike_ryuk.exe"
1⤵
PID:4884

memory/4884-0-0x0000000000890000-0x00000000008F0000-memory.dmp

Filesize
384KB

Download
memory/4884-9-0x0000000000890000-0x00000000008F0000-memory.dmp

Filesize
384KB

Download
memory/4884-8-0x0000000140000000-0x00000001402E4000-memory.dmp

Filesize
2.9MB

Download
memory/4884-12-0x0000000140000000-0x00000001402E4000-memory.dmp

Filesize
2.9MB

Download
memory/4884-7-0x0000000000890000-0x00000000008F0000-memory.dmp

Filesize
384KB

Download