General

  • Target

    2024-08-29_d960cc50c71508e70869357561828f80_cobalt-strike_ryuk

  • Size

    1.5MB

  • MD5

    d960cc50c71508e70869357561828f80

  • SHA1

    58f322a0a63387d200e7f19c0684c2cebe5eb4ea

  • SHA256

    5d6414ea3696a4639f285d00386144e6187accd41cd89d89ac650cd1818ffed3

  • SHA512

    8b12c4bd00ee536165941d13d62a99dd5e13ed1b49366a1136ea1bfe13d1410141fbdeb5b874daef7272795195e7ae188666782570f7724d735aab4e5e68c0a6

  • SSDEEP

    49152:VOBynH1wM+v6UJxLQd7BHjdfFf9Ckt7c20+9qNxUW:Hn4LQd7LtfEkKK90

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-08-29_d960cc50c71508e70869357561828f80_cobalt-strike_ryuk
    .exe windows:5 windows x64 arch:x64

    f074e6ca80c6be1bf7a7c56645030fbd


    Headers

    Imports

    Exports

    Sections