Analysis
-
max time kernel
0s -
max time network
4s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
-
submitted
21/11/2024, 09:50
Errors
Reason
platform exec: image=C:\Users\Admin\AppData\Local\Temp\2024-11-21_9ba80a7f14d45e0ab0ef2c9191b98d69_cobalt-strike_ryuk.exe
command="C:\Users\Admin\AppData\Local\Temp\2024-11-21_9ba80a7f14d45e0ab0ef2c9191b98d69_cobalt-strike_ryuk.exe"
wdir=C:\Users\Admin\AppData\Local\Temp
Payload error: The application has failed to start because its side-by-side configuration is incorrect. Please see the application event log or use the command-line sxstrace.exe tool for more detail.
General
-
Target
2024-11-21_9ba80a7f14d45e0ab0ef2c9191b98d69_cobalt-strike_ryuk.exe
-
Size
1.5MB
-
MD5
9ba80a7f14d45e0ab0ef2c9191b98d69
-
SHA1
e4553c4b7cca364f101a11fdc00c493535b8c424
-
SHA256
5b1ee58f18b8db607c05f561aab60c7aac839c5169596dcdcab0b0187003a432
-
SHA512
b177d68a7ad58b434528552af6d68a3c4a4cc086379347f2dd157a1c09853219021fcbea5de79ab183b87da7e0043ad02a2afda03186c7c9420e1252ebfc620e
-
SSDEEP
24576:aUxVQLMmGdD/rz4nrh5TZhFUOW44AFyxU5MsSkQ/7Gb8NLEbeZ:aUxVQAmGVrz495TZhF1W4PykQ/qoLEw
Score
1/10
Malware Config
Signatures
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-11-21_9ba80a7f14d45e0ab0ef2c9191b98d69_cobalt-strike_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-11-21_9ba80a7f14d45e0ab0ef2c9191b98d69_cobalt-strike_ryuk.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.6MB