General

  • Target

    2024-01-24_e5d12571de5c86d8b52e82cbf3747fc7_cobalt-strike_ryuk

  • Size

    946KB

  • MD5

    e5d12571de5c86d8b52e82cbf3747fc7

  • SHA1

    ffcf730d73cecc382d892bb81fdfa3508e7e74d3

  • SHA256

    f43dd85915a974b63f4841eada3046dbbdc07c919a9f532dfa2b212d179f6a95

  • SHA512

    c97cf8f14f72b1b601eb9030e0590267c373a7b36bf9e0db62e3d387aec1f56ad5c03acebbf1a3f9a8089f66cdcf28c233a89cf1a8e8fd073ede4f39e3618bd5

  • SSDEEP

    12288:rlLMLTHAXoUpkdJAdGyac9Z4z6TgsO/CU3Av/UXoPGM/RU3vsYAGYxM8flFuOrQx:KTgnpwJ+R0+fOaD3/R/R25YqgLrQx

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-24_e5d12571de5c86d8b52e82cbf3747fc7_cobalt-strike_ryuk
    .exe windows:6 windows x64 arch:x64

    11145c2c07e671cc47c0cfcafd4c3816


    Headers

    Imports

    Sections