General

  • Target

    2024-09-09_abfa60727e5d060bce30f3576b0e4cfc_cobalt-strike_ryuk

  • Size

    2.5MB

  • MD5

    abfa60727e5d060bce30f3576b0e4cfc

  • SHA1

    4b090563b47a8dd025c52169943b016ca3e6bd8e

  • SHA256

    5a03d78cf3d295052d3238a5dd05ce4e6ce9dd3b7a0c1daf106cd9adee91ea3c

  • SHA512

    66dd3eeeeae56d5fa4c62eed7d8ccc0330c8450011e2a7159c014bdd7e49fb4990fa17cde12c2d03ad9ee7b862a55d008ef184a3084f1d366526faf68fc0f427

  • SSDEEP

    24576:Xczl7ZyNS+1ZjSODK8StSjRqFFPJyz0rHkHz4Q2VrtnwIXuRRPIH+3aUfwe:Xczl7ZgS+1oODSt3LP17SzfaBwuugX

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-09-09_abfa60727e5d060bce30f3576b0e4cfc_cobalt-strike_ryuk
    .exe windows:10 windows x64 arch:x64

    697a31759fc5eac4818c63963c0778b3


    Headers

    Imports

    Exports

    Sections