General
-
Target
2024-09-18_01215203bc95b91916b8cea76d6ec349_cobalt-strike_ryuk
-
Size
1.6MB
-
Sample
240918-dxf8ws1bpp
-
MD5
01215203bc95b91916b8cea76d6ec349
-
SHA1
65274df9bf9bb4c9de43817cd6689b883d59fcbe
-
SHA256
58e4fa8e72bb969c8066f16e78d3d71eb7225b508c9841e07c4858c6ac76ef29
-
SHA512
36f2ca145ef54fa714567cc175c64b7a7f2fdfb315ab50070ddba68c9149a29e3a1a50e69cf55ad4368e6c9079580b161bf9d576bbad1262a90dba2120936770
-
SSDEEP
49152:8lp9tHfYoEaTSiz23THT3WSMpDgF/qB07j6KIeVSc/zui+:8X/LEQkF/qBO6K2c/ii+
Behavioral task
behavioral1
Sample
2024-09-18_01215203bc95b91916b8cea76d6ec349_cobalt-strike_ryuk.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-09-18_01215203bc95b91916b8cea76d6ec349_cobalt-strike_ryuk.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
metasploit
windows/shell_bind_tcp
Targets
-
-
Target
2024-09-18_01215203bc95b91916b8cea76d6ec349_cobalt-strike_ryuk
-
Size
1.6MB
-
MD5
01215203bc95b91916b8cea76d6ec349
-
SHA1
65274df9bf9bb4c9de43817cd6689b883d59fcbe
-
SHA256
58e4fa8e72bb969c8066f16e78d3d71eb7225b508c9841e07c4858c6ac76ef29
-
SHA512
36f2ca145ef54fa714567cc175c64b7a7f2fdfb315ab50070ddba68c9149a29e3a1a50e69cf55ad4368e6c9079580b161bf9d576bbad1262a90dba2120936770
-
SSDEEP
49152:8lp9tHfYoEaTSiz23THT3WSMpDgF/qB07j6KIeVSc/zui+:8X/LEQkF/qBO6K2c/ii+
Score10/10-
MetaSploit
Detected malicious payload which is part of the Metasploit Framework, likely generated with msfvenom or similar.
-