Analysis

  • max time kernel
    90s
  • max time network
    16s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    25-01-2025 01:09

General

  • Target

    2025-01-25_1af4d13853990b4af4541d7069707e9a_cobalt-strike_ryuk.exe

  • Size

    268KB

  • MD5

    1af4d13853990b4af4541d7069707e9a

  • SHA1

    8a088b05a0f4c355a329160a48c218bd898126c7

  • SHA256

    55c287e14c7b05ec626d04582b2343f0e266618d48ee03012430c192bb4483f7

  • SHA512

    be7200decf9098e608adf063aedd6e14b3fe87a47220fd7f1da6ba0183cc53b40014a8d574f09060f943b54c7acdc317c9bd89ca1419e8308c67dca6334d47e3

  • SSDEEP

    6144:j5c15ootH4w3wAp0KRdCyDFFEkh0CMsAZ:lcLo6VJpxRPLxM

Score
1/10

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\2025-01-25_1af4d13853990b4af4541d7069707e9a_cobalt-strike_ryuk.exe
    "C:\Users\Admin\AppData\Local\Temp\2025-01-25_1af4d13853990b4af4541d7069707e9a_cobalt-strike_ryuk.exe"
    1⤵
      PID:2440

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads