General

  • Target

    2024-06-03_32ef5f509573d5ab1d6080a50694923e_cobalt-strike_ryuk

  • Size

    796KB

  • MD5

    32ef5f509573d5ab1d6080a50694923e

  • SHA1

    52a85a0bc76a38b52b582c5b8312be3cf4da1cb7

  • SHA256

    db6bb00ba46a56768b44714fad977876e402cdf1132de828e0f79a4013864f6a

  • SHA512

    efd459503f44afa9525a475605f6583d32cfdd9656d48cca80bbb45949a2d83eab51ece0eed844f78606db86804aa87fc9f770f0949d650860b720dccfa57057

  • SSDEEP

    12288:wXDCAZzP/w24lhD6JvY67VMBNO/aXpXI22+VufvdIOKek1h4TA8bXQJYe:LANw243D6J17W8CX32+KJNA80T

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-03_32ef5f509573d5ab1d6080a50694923e_cobalt-strike_ryuk
    .exe windows:6 windows x64 arch:x64

    33d31a4df5121c8c368d8b7a65733fa3


    Headers

    Imports

    Sections