General

  • Target

    2024-09-01_f881b474353e6e4d49ca6c78e44c5982_cobalt-strike_ryuk

  • Size

    2.1MB

  • MD5

    f881b474353e6e4d49ca6c78e44c5982

  • SHA1

    73da7ff76d341fa632aa52a03912662a41d2f785

  • SHA256

    180ac27d91eb5e37defa7af8faf0cef0a5117ad2c6d97de5528d94ec37d3671d

  • SHA512

    1ec9391c6d6b191fa5c9509dc6b4c31102ce1a2ff3c9702806e624b2c3f7e924de57a3caf0c01fd0287aaa9674c2e75cfe3a708c6a3aa3881c66df489ef69206

  • SSDEEP

    49152:0XWtcDco9YXPtSjeJgEjTmucUaB0zj0yjoB2:0SAYXPwtEjELB2Yyjl

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-09-01_f881b474353e6e4d49ca6c78e44c5982_cobalt-strike_ryuk
    .exe windows:5 windows x64 arch:x64

    a3f0f114dbae26733f0620e8a4f28aeb


    Headers

    Imports

    Exports

    Sections