General

  • Target

    2024-09-08_49d1f94c2405f6fe48043e7f4cbb015d_cobalt-strike_ryuk

  • Size

    58.7MB

  • MD5

    49d1f94c2405f6fe48043e7f4cbb015d

  • SHA1

    38e752347fb218010d6f9a9e99009afea340d299

  • SHA256

    7fa70a235e8dad7bb9d550dca89e0f6bdb95bc4092d0866ae68240cf03594fdb

  • SHA512

    aab5914dd6a3d4023debdab56b9524e71a28deae9263e6af6d50d28813d4aa3d265dd3871a9c9097f587e4bf7753277fc0f5b5273fe54fbfdaf528a893564357

  • SSDEEP

    196608:KfVT66sLT98vxymgA24+FC5agf8gFI5QnCpJsDepsSdXeDS6ze246kvx:egTW5/R+Fw0g+sy3eDS6q246kv

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-09-08_49d1f94c2405f6fe48043e7f4cbb015d_cobalt-strike_ryuk
    .exe windows:6 windows x64 arch:x64

    37ed53bc47533084e90ff3081a992816


    Headers

    Imports

    Sections