General
-
Target
2024-07-27_0e0478efe176124b94cbef71fa0c5a8f_cobalt-strike_ryuk
-
Size
2.3MB
-
Sample
240727-xpz6ksxanf
-
MD5
0e0478efe176124b94cbef71fa0c5a8f
-
SHA1
4b29aec01a9836487762d481d98f55ab0a496d7f
-
SHA256
4e131e4ea666b8cf38dc3f4336604868d0682bfa06ec4f8f69e23f80b3eaa3b7
-
SHA512
478a02376c5e6e283471b00ce4060371d88a0f622bf90b32517bcf98e212ebad5a7ee2aa5b9e564e99fc29e506e4f4f6614f5f8a89ce8671af0b3739dce11416
-
SSDEEP
49152:V64jeLmlzahzjteO+iZvRyWatmav/R8AL2t:0tVb9Ry/SAyt
Static task
static1
Behavioral task
behavioral1
Sample
2024-07-27_0e0478efe176124b94cbef71fa0c5a8f_cobalt-strike_ryuk.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
2024-07-27_0e0478efe176124b94cbef71fa0c5a8f_cobalt-strike_ryuk
-
Size
2.3MB
-
MD5
0e0478efe176124b94cbef71fa0c5a8f
-
SHA1
4b29aec01a9836487762d481d98f55ab0a496d7f
-
SHA256
4e131e4ea666b8cf38dc3f4336604868d0682bfa06ec4f8f69e23f80b3eaa3b7
-
SHA512
478a02376c5e6e283471b00ce4060371d88a0f622bf90b32517bcf98e212ebad5a7ee2aa5b9e564e99fc29e506e4f4f6614f5f8a89ce8671af0b3739dce11416
-
SSDEEP
49152:V64jeLmlzahzjteO+iZvRyWatmav/R8AL2t:0tVb9Ry/SAyt
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-