General
- Target 2024-04-07_4cd331c21f5b43dfe2f41fd55ff8be08_cobalt-strike_ryuk
- Size 796KB
- Sample240407-w1f2eabc35
- SHA256 7f61c22d966d4d79048c0bcadf5e4720c73b26f645aee7aa9e5ecc791310bb25
- MD5 4cd331c21f5b43dfe2f41fd55ff8be08
- SHA1 495818cb03169d3e67ad6aec36e483d3ad8b72f8
- SHA512 95e3e513d902ea4f5f9716a1b96fd043abfd897820348c9d362c4a7637b44a1733c8c6b76b5cc4ace6942d2985d59ff0d4e3224ccd261943f90269c18bacc345
- SSDEEP 12288:GXDCAZzP/w24lh53Dbif4YAJ93y1NrLiLtJ8nBxu7DCOzRq8DvQgqAbhI:RANw2435Hofe3y1sInB2COzRq8DvFqt
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2024-04-07_4cd331c21f5b43dfe2f41fd55ff8be08_cobalt-strike_ryuk.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-04-07_4cd331c21f5b43dfe2f41fd55ff8be08_cobalt-strike_ryuk
- Size 796KB
- SHA256 7f61c22d966d4d79048c0bcadf5e4720c73b26f645aee7aa9e5ecc791310bb25
- MD5 4cd331c21f5b43dfe2f41fd55ff8be08
- SHA1 495818cb03169d3e67ad6aec36e483d3ad8b72f8
- SHA512 95e3e513d902ea4f5f9716a1b96fd043abfd897820348c9d362c4a7637b44a1733c8c6b76b5cc4ace6942d2985d59ff0d4e3224ccd261943f90269c18bacc345
- SSDEEP 12288:GXDCAZzP/w24lh53Dbif4YAJ93y1NrLiLtJ8nBxu7DCOzRq8DvQgqAbhI:RANw2435Hofe3y1sInB2COzRq8DvFqt
- MD5 SHA1 SHA512 SSDEEP
-
Executes dropped EXE
-
Drops file in System32 directory