General

  • Target

    2024-08-22_119d3970e8b3a80b6390bc45e55ed025_cobalt-strike_ryuk

  • Size

    1.9MB

  • MD5

    119d3970e8b3a80b6390bc45e55ed025

  • SHA1

    3b79302c25b7af16f02b930e60bda1d569d61b1d

  • SHA256

    6fea6b49b6a7697b4dcbd676d56d6f30db843d6e74a29ad463b459b4ef795af2

  • SHA512

    de67ddd5a5ead60a489c9da63b865331324ea1e606e11cdf61c4beb9faffe247b9392b80f04bc8ea3ea37c9a77489f39289bb0b681d89332596ef3037b559126

  • SSDEEP

    24576:HVN8FYh+50m/YOn/xvNRRxVirnlBUKZ408vTZrX+lgdW:HVOyh+50zyxRiLlBUKubZrX+ld

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-08-22_119d3970e8b3a80b6390bc45e55ed025_cobalt-strike_ryuk
    .exe windows:10 windows x64 arch:x64

    0e642f23f9abdf83946d6276e3ce3f47


    Headers

    Imports

    Exports

    Sections