General

  • Target

    2024-08-07_855bf24dab609c9f6664d10d13d6a284_cobalt-strike_ryuk

  • Size

    1.4MB

  • MD5

    855bf24dab609c9f6664d10d13d6a284

  • SHA1

    f32a1c08a93a77b9e3c8cb28ff54f9ccd33bc8e7

  • SHA256

    372e3b2096e2afd123ea6d4b8b5e4b5c9fa0eb3dc2cfbe91231f90e26c516c54

  • SHA512

    8370d9f62a0997b531ee0769c29b8c0f47553ab0564cc8784e04847ea3a37a4a08b0e0efb22fd040514e75a067a1a28dacb404dd9b819dd7f318f64aac03ceed

  • SSDEEP

    24576:GRz4A0VpLP7DmspWcY/0eatsqjnhMgeiCl7G0nehbGZpbD:GRM3pr7qspHYkDmg27RnWGj

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-08-07_855bf24dab609c9f6664d10d13d6a284_cobalt-strike_ryuk
    .exe windows:5 windows x64 arch:x64

    ac8fbae34e095f741a2b5478e2a92f8e


    Headers

    Imports

    Exports

    Sections