General

  • Target

    2024-04-29_81761da1b4ca7539561cf1b114767186_cobalt-strike_ryuk

  • Size

    796KB

  • MD5

    81761da1b4ca7539561cf1b114767186

  • SHA1

    15e6c8245975bc68fa59a15eb7d21bc2500b3415

  • SHA256

    45de0566048022db35ba0ce6d0f837fcbf32c1534670f013ca5cd1ea9c0e484c

  • SHA512

    b21ae9deec50452f679157fa0b5cde963cf232ecc139b035cbd8f3995458c8a2e068d69ad747be47a6568e80ab1ad40719a01cd9ff1bb26f6f49cdd344a765f2

  • SSDEEP

    12288:3XDCAZzP/w24lhhoH/uLJOyo937vGFWxwFJI+yeuVb8r+ZP712Ii+51cjVWtVj5J:+ANw24362JOt934J7Z6bQaj1BvUm9J

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-29_81761da1b4ca7539561cf1b114767186_cobalt-strike_ryuk
    .exe windows:6 windows x64 arch:x64

    33d31a4df5121c8c368d8b7a65733fa3


    Headers

    Imports

    Sections