Analysis
-
max time kernel
0s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
21/11/2024, 09:42
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2024-11-21_ec9e796332a0ea556adba419cb7f92af_cobalt-strike_ryuk.exe
command="C:\Users\Admin\AppData\Local\Temp\2024-11-21_ec9e796332a0ea556adba419cb7f92af_cobalt-strike_ryuk.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
-
Target
2024-11-21_ec9e796332a0ea556adba419cb7f92af_cobalt-strike_ryuk.exe
-
Size
1.5MB
-
MD5
ec9e796332a0ea556adba419cb7f92af
-
SHA1
230d86697d1fbf586f6b481dcf755aa4eeeb16b9
-
SHA256
e3a36a80b149f0a4c47c414226a8c67903592adc872d071205aa2e300e28440d
-
SHA512
5f78d096d6359bb3729c6c2605b0433b86c4269c6694ee6682c778c3c430d86c42af6f1515ab1a313159e4f553efe287c34a3f08e82ffa463384a9d857e52887
-
SSDEEP
49152:1UxVQAmGVrz495TZhF1W4fqmVovIC5ubpl8mWZaU:c295T3NCa
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-11-21_ec9e796332a0ea556adba419cb7f92af_cobalt-strike_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-11-21_ec9e796332a0ea556adba419cb7f92af_cobalt-strike_ryuk.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB