General

  • Target

    2024-04-26_bb948113d8b6ea6048008fc19274d352_cobalt-strike_ryuk

  • Size

    809KB

  • MD5

    bb948113d8b6ea6048008fc19274d352

  • SHA1

    801ac1236ab2e22dddd1a268da56725e504ee693

  • SHA256

    40d5b77f87086cdd7d248f5b3cdb06ed236d4a67da102c2d68744b30c20bd06b

  • SHA512

    6ebe611cb2661d6c53a697cbffd02f1bacd44994fea4465f9d3efd0d3039e5499e6c0b580489d42dcbcab73f4b635023b276bb27338b387ffd9c787c6d7599ef

  • SSDEEP

    12288:EX721U3FZQxqkXVbcgW9oRFW82FZKGMH5Woo1OviU/zwX8r9zwdo59S:E40onW7FZKG0Woo4jw5

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-26_bb948113d8b6ea6048008fc19274d352_cobalt-strike_ryuk
    .exe windows:6 windows x64 arch:x64

    5fdffa9250cd7acca4791fa42c00ee7e


    Headers

    Imports

    Sections