General

  • Target

    2024-08-24_89f56efe068ed40fe95dba8e6453a2e3_cobalt-strike_ryuk

  • Size

    3.0MB

  • MD5

    89f56efe068ed40fe95dba8e6453a2e3

  • SHA1

    274de57f196c2830dc214bf0f4085bc392b6b97e

  • SHA256

    c68e1aeda67f78edce8ef2ba905ba919875279a88ad5577b838d80f75f4364f9

  • SHA512

    2e24d520e85fe036b98b516fc8320dfeee378e81bf79af358ed3f2b19e2ea469f039b8fb85ee1bd1537043373f3ffb37f05f5458ad78932411c3b7cb2e88f2d8

  • SSDEEP

    49152:D+d84OslBulLnkSso6LCtq/1UMp/EYNtg6100d/WdLX7eKoJocPJieuJ2is/8aeg:ewJvQCMpZvcFvOXuAR/Leg

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-08-24_89f56efe068ed40fe95dba8e6453a2e3_cobalt-strike_ryuk
    .exe windows:10 windows x64 arch:x64

    5e978120bf34fea62b9848b233791d3a


    Headers

    Imports

    Exports

    Sections