General

  • Target

    2024-02-13_38ef1b04f943d44df95397a5f213c906_cobalt-strike_ryuk

  • Size

    201KB

  • MD5

    38ef1b04f943d44df95397a5f213c906

  • SHA1

    83d0172e5c6af4ea7ba8170d5baa128f55c6b948

  • SHA256

    59875eace9dda9b9cec89733b77f22b274b2fd14ae67e723d4b007114f15e632

  • SHA512

    083ad84bcb3482bf5c3fabf5d3fb3425f82ae6172dc964bf53ef12d8bba807ef2ea5c0af3af691fa1e48120b0e60299bef150abc46fd470ef29ba2df30c04f84

  • SSDEEP

    3072:+EsnXqEVU7txWsB48AyoCMwLiX5MlV2fHH5DZAkWC:yXqEVU7vTAyoCM2iJoQ5

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-13_38ef1b04f943d44df95397a5f213c906_cobalt-strike_ryuk
    .exe windows:6 windows x64 arch:x64

    e1da10843448572263082a39d69554b7


    Headers

    Imports

    Sections