General

  • Target

    2024-07-25_a4e1cef982408a0301fa03dbae8a1e68_cobalt-strike_ryuk

  • Size

    1.9MB

  • MD5

    a4e1cef982408a0301fa03dbae8a1e68

  • SHA1

    d8c5ddf6f97b012c1673297330b74021c59016eb

  • SHA256

    0dc6745ab17a0e20a3cee88718d3222f0b172bcc27dcb95612862ff7e6647019

  • SHA512

    29bee8385a9834b0e83a7b42f0c969e0805eeb0994ad73776d48193b77c6144f04baa14a400bf7a2c511550a8951804e932bdaae15144a25913522f544339b6c

  • SSDEEP

    49152:slOVDTtQY6SoNtaUJ67UnHpclbwbWAaJiwmqTjcokiLlBUKubZrX+ld:TqSUHxqPF2iBSTZL+ld

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-07-25_a4e1cef982408a0301fa03dbae8a1e68_cobalt-strike_ryuk
    .exe windows:5 windows x64 arch:x64

    9eaf1e1f345d5eabac8a31ef2a96a701


    Headers

    Imports

    Exports

    Sections