General

  • Target

    2024-08-06_eea08ff1b0e2be346e7def1012cef53f_cobalt-strike_ryuk

  • Size

    5.5MB

  • MD5

    eea08ff1b0e2be346e7def1012cef53f

  • SHA1

    ac06990f8447eef3742471e3d272d23635455876

  • SHA256

    646e7f6a15e89a2c29cd392cd828aa8f503d66d950b5709037a17802676dee58

  • SHA512

    199dc9b22cdd4e5020c94510ba9c93ec1bb9861d246b74c41bed3ecf5c93098394ab71fd2ac527cc1c9359facba3c17132805e2d4ae93524aea5e72688178823

  • SSDEEP

    49152:fEFbqzA/PvIGDFr9AtwA3PlpIgong0yTI+q47W1Ln9tJEUxDG0BYYrLA50IHLGfB:bAI5pAdVJn9tbnR1VgBVmMB2Yyjl

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-08-06_eea08ff1b0e2be346e7def1012cef53f_cobalt-strike_ryuk
    .exe windows:5 windows x64 arch:x64

    ec53853f09f849c6ff4e957a4faaa766


    Headers

    Imports

    Exports

    Sections