Analysis

  • max time kernel
    95s
  • max time network
    143s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08-12-2024 01:25

General

  • Target

    2024-12-08_200b46ef107bfbcee2c67f8deaf40a5d_cobalt-strike_ryuk.exe

  • Size

    1.6MB

  • MD5

    200b46ef107bfbcee2c67f8deaf40a5d

  • SHA1

    9982837c3b27308aac4d13a157c2c15a63324998

  • SHA256

    1ad77ee795789976bbd147565d6b3b43d7c3a98b077efafa02c6d7658ffc706d

  • SHA512

    cf3bb9ee8573d165b0fa9c162bcd5c01515e7b7447f64c65dd5ca43b67d00e1e19169d3be94ed22b960374346ea3d4dad571dc47ac9e96c7b3b5d9734e81bb94

  • SSDEEP

    49152:JC9GqlhiolDqfTWokzqHcOBi4ASuTzO3QTmdQQ:J4wcOBikemdJ

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2024-12-08_200b46ef107bfbcee2c67f8deaf40a5d_cobalt-strike_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2024-12-08_200b46ef107bfbcee2c67f8deaf40a5d_cobalt-strike_ryuk.exe"
    1⤵
      PID:4720

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads