Analysis
-
max time kernel
0s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
19/11/2024, 11:25
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2024-11-19_93533edc92178e55a69bc8df33b6c48f_cobalt-strike_ryuk.exe
command="C:\Users\Admin\AppData\Local\Temp\2024-11-19_93533edc92178e55a69bc8df33b6c48f_cobalt-strike_ryuk.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
-
Target
2024-11-19_93533edc92178e55a69bc8df33b6c48f_cobalt-strike_ryuk.exe
-
Size
1.5MB
-
MD5
93533edc92178e55a69bc8df33b6c48f
-
SHA1
925b824d2624f8a8ef0e556fb7c0f1df2b1a04fb
-
SHA256
d127771236b53dd82285f2a72e8113b707b8800ed2f2d4094879439b3cf6373e
-
SHA512
2773b85aac2b6646869178c6570bd3790f97785b9bc3c00f0aa47c8ae60008fb09c1a360caf97a7e85b8374d7ee1264ffd6446dc5e3e97255899957ef956c9b2
-
SSDEEP
24576:TUxVQLMmGdD/rz4nrh5TZhFUOW44AFyxU5MXSc6wKpLIAhN8Wcyz8vYfH:TUxVQAmGVrz495TZhF1W4PL2KruAIg/
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-11-19_93533edc92178e55a69bc8df33b6c48f_cobalt-strike_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-11-19_93533edc92178e55a69bc8df33b6c48f_cobalt-strike_ryuk.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB