General

  • Target

    2024-08-17_2226e09bf58a9e1e3799270e5047443b_cobalt-strike_ryuk

  • Size

    3.0MB

  • MD5

    2226e09bf58a9e1e3799270e5047443b

  • SHA1

    bfe1f65330915692cc87f5f78015c17d3f5288cf

  • SHA256

    0139bf24ff74a7c20504ac29eed3acf756a8a039f7dd43ec77691f15c734d79b

  • SHA512

    b58368c7a5470b02eacaa671edc73c64d159c18ec45a0ac1400c6155b8d0fc77aa2cd9a9a929dce48b5ef1e2e8b53dabb4c1388098678342c98b467fbd2e62e9

  • SSDEEP

    49152:/qdrKCVzd3pJpyV6i6UD3d96xKAGd8d9RFM09DuLphbq2G/xAQgAT76sQuE:Kd3vud968ChCq2Y6qGsQr

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-08-17_2226e09bf58a9e1e3799270e5047443b_cobalt-strike_ryuk
    .exe windows:10 windows x64 arch:x64

    5e978120bf34fea62b9848b233791d3a


    Headers

    Imports

    Exports

    Sections