General

  • Target

    2024-04-27_fb9267e7b440d27248e73e8da7836ccc_cobalt-strike_ryuk

  • Size

    796KB

  • MD5

    fb9267e7b440d27248e73e8da7836ccc

  • SHA1

    a5a4f602aec5ab78e137d655f3f4a322fe17a0ba

  • SHA256

    abd301158c8638618e12e1f23623202e78555f849ebc81abe14d949bfda85f44

  • SHA512

    849b4ffa6d3589b114ade48ed40dc47e64e28617c74d69f845aca54716ae2abae6f3c8af6064417e48bf9535ab3ccca2141643c630dffc0af9312355a6a164a6

  • SSDEEP

    12288:BXDCAZzP/w24lh5UVpyNj3C/Ei9OQSt6uk3zO61zOQJjN6atJ6bVgwtZJz:gANw2435UMj3C/Uvw3B8atQVpZJ

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-27_fb9267e7b440d27248e73e8da7836ccc_cobalt-strike_ryuk
    .exe windows:6 windows x64 arch:x64

    33d31a4df5121c8c368d8b7a65733fa3


    Headers

    Imports

    Sections