General

  • Target

    2024-08-05_b25197df4f73f9ec300f2b26fbf99312_cobalt-strike_ryuk

  • Size

    2.0MB

  • MD5

    b25197df4f73f9ec300f2b26fbf99312

  • SHA1

    a738a38ffa0dcbead392a29581882fa347793bb4

  • SHA256

    d5d0c1a451c16238b3c549417f932a0b0f5cb8cd5f0d692955c941903eec9d01

  • SHA512

    9e4d67ef33c8b627d0cd71a73ee64a08ce5dae8118ca745e7a0270b079b03853d353db88ecea16f04a5a65f9693c3b192e0ac6f7c7785f880c41061206bf2dc3

  • SSDEEP

    24576:FuR2gjNMTTLqfprxFZd9ZEX2cpBJR5RtxsqjnhMgeiCl7G0nehbGZpbD:FuR2kNMPLSprTNZEm+1zDmg27RnWGj

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-08-05_b25197df4f73f9ec300f2b26fbf99312_cobalt-strike_ryuk
    .exe windows:5 windows x64 arch:x64

    fc44d8979492890d05349b13128963d9


    Headers

    Imports

    Exports

    Sections