General

  • Target

    2024-08-18_f36ca7ec3073686b70d739d76f8159b3_cobalt-strike_ryuk

  • Size

    2.2MB

  • MD5

    f36ca7ec3073686b70d739d76f8159b3

  • SHA1

    3156d96ab5b21dc3591ebf51db3db1202b7e65bc

  • SHA256

    6f21b1aee84d0309378a62a385d377055387b98284e8d85f236bceafecac382f

  • SHA512

    2bd9a41752d7a8aadd905452a467d10a378689d24934b25df2fcefc8920c6b2166266e059ea77d45a9fe92fa090bedea9ed739f3f83e9e01ec48558991534724

  • SSDEEP

    49152:o7Zl3U4EankhQsaPccHC6JLNiXicJFFRGNzj3:U3yankqF7wRGpj3

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-08-18_f36ca7ec3073686b70d739d76f8159b3_cobalt-strike_ryuk
    .exe windows:10 windows x64 arch:x64

    2b80f7bbc50fbd7dec6ec37a62c612b8


    Headers

    Imports

    Exports

    Sections