General

  • Target

    2024-04-20_a500776c526fd1f4295014caa1fa677c_cobalt-strike_ryuk

  • Size

    946KB

  • MD5

    a500776c526fd1f4295014caa1fa677c

  • SHA1

    aa3876a9e4edb869ade04bcab8a65802ca1be336

  • SHA256

    fadb644fcd727785433d825d2fd3ca73e06c6e0e2308a084d3f0f5ce4db981e9

  • SHA512

    398408df4a134a63d49bef7232e16cb97c9a9b4fe1f2856236488a75b1799eaab46ddcea35b8b6f3b5f9472a238b58fed4e6ad80d1496297b69d0ab54acabf1a

  • SSDEEP

    24576:HTgnpwJ+Rz8NDFKYmKOF0zr31JwAlcR3QC0OXxc0H:z0dzgDUYmvFur31yAipQCtXxc0H

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-20_a500776c526fd1f4295014caa1fa677c_cobalt-strike_ryuk
    .exe windows:6 windows x64 arch:x64

    11145c2c07e671cc47c0cfcafd4c3816


    Headers

    Imports

    Sections