General

  • Target

    2024-09-07_ff45205e6f8ae14e78f0b82ddf3ed982_cobalt-strike_ryuk

  • Size

    1.4MB

  • MD5

    ff45205e6f8ae14e78f0b82ddf3ed982

  • SHA1

    ec5437daa5a38901b71108bf9a0e8d086b3a949c

  • SHA256

    c6b30a77a5364125b118da9b39d0b1f7567b61945613a798e1cbfe1ce7d11f8e

  • SHA512

    30deb651fa57ad26ac616450dde9aeac2b6ba0b659263dfd855641a1828041f1f3881f6f7659700db315cfacd3619f8b1563d8245b2a371f8266b6768f233f20

  • SSDEEP

    12288:0sixPwEsHuXzNXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDR:0ZFwVuDNsqjnhMgeiCl7G0nehbGZpbD

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-09-07_ff45205e6f8ae14e78f0b82ddf3ed982_cobalt-strike_ryuk
    .exe windows:10 windows x64 arch:x64

    1bba9348e5de4a3a0ecedee03cd7f678


    Headers

    Imports

    Sections