General

  • Target

    2024-09-09_a89557e3503f0883923dcbb00b7e1738_cobalt-strike_ryuk

  • Size

    1.9MB

  • MD5

    a89557e3503f0883923dcbb00b7e1738

  • SHA1

    0a43f47e3d7803f1c29c23f63e00229131bef2aa

  • SHA256

    c3901d806392c0f53a65d603473d8f55a4f2974226f46636031b04deb1b9a813

  • SHA512

    ce05f43087ac632263106ef09c1b99757184c48674a55f0c0c4872ea0eb2f65e7a7186eacf3ff2ca3e6723facb316ec1be39d7bdf3204bf5375a5a8422bf58ba

  • SSDEEP

    49152:FlOVDTtQY6SoNtaUJ67UnHpclbwbWAaJiwmqTjcodgDUYmvFur31yAipQCtXxc0H:KqSUHxqPF2U7dG1yfpVBlH

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-09-09_a89557e3503f0883923dcbb00b7e1738_cobalt-strike_ryuk
    .exe windows:5 windows x64 arch:x64

    9eaf1e1f345d5eabac8a31ef2a96a701


    Headers

    Imports

    Exports

    Sections