General

  • Target

    2024-04-22_a66f06c157b3057a1663fce3ed024dde_cobalt-strike_ryuk

  • Size

    946KB

  • MD5

    a66f06c157b3057a1663fce3ed024dde

  • SHA1

    34075365a21e6533636df250ba6546b7c884f406

  • SHA256

    cd60c95b6f59441579c2991e0ba377439bca6e31a00952f56ef96d4d1d5b22ab

  • SHA512

    f77c37a83170cc219c60f0669a2bbddb28815fd1e61bbffa5b7e8cd1cd22f5e70e66cfb2aca69c7ae122cb8019d97407cb6e247d0ddad545af387bbd9ed35e89

  • SSDEEP

    12288:plLMLTaAXoUpkdJAdGyVxkQYzzFNOitZSSL2P13OBgysd9iQD5ieeFSHIwM:UTfnpwJ+RbDYXLZSSk1RD9Lde

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-22_a66f06c157b3057a1663fce3ed024dde_cobalt-strike_ryuk
    .exe windows:6 windows x64 arch:x64

    11145c2c07e671cc47c0cfcafd4c3816


    Headers

    Imports

    Sections