General

  • Target

    2024-05-28_29387ea78f011fe0320f63d8a77dd6ef_cobalt-strike_ryuk

  • Size

    796KB

  • MD5

    29387ea78f011fe0320f63d8a77dd6ef

  • SHA1

    ef3d966c8cfb90b9fe8cad9a476f415f33cc829e

  • SHA256

    dad32520351189a0efece96aeb20d1bd35eee7bb6e986e152a79116da0b88d1d

  • SHA512

    b6a3e3bf2b7247d6d00d7a2af3d8e0f2db8a0d0cdfb859400c8b831d439f2ed1c1a82d3fa6d73fff2fcf259176c34cde909395fc82c9ca4dcc84f970d2996991

  • SSDEEP

    12288:LXDCAZzP/w24lhN6JvY67VMBNO/aXpXI22+VufvdIOKek1h4TA8bXQJYe:6ANw243N6J17W8CX32+KJNA80T

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-28_29387ea78f011fe0320f63d8a77dd6ef_cobalt-strike_ryuk
    .exe windows:6 windows x64 arch:x64

    33d31a4df5121c8c368d8b7a65733fa3


    Headers

    Imports

    Sections