General

  • Target

    2024-09-18_1312bfbdcecffdb9b7ef41a5b0882b09_cobalt-strike_ryuk

  • Size

    3.2MB

  • MD5

    1312bfbdcecffdb9b7ef41a5b0882b09

  • SHA1

    44c2ce25fecdba9debc5fdec3fe0ddc27a4625be

  • SHA256

    c45e91f6893281711a7b2a855521b7a32bc2f21f3db720577a253ce8a1a3216b

  • SHA512

    c647d040f41aaa008eb8033ec7e847669dc5a092e8061f1be28f95fce7d63ccf83c010c09f4e5f3fbb6c621b187473681368adcdb9c94cf4207bb7da31b1a519

  • SSDEEP

    49152:ty//VspDnsRh+/2fLq0GVCqGxKCky2jxxr/Suy9UovcPNB+kn3Hnx:60Wh+/M0lCkFN+k

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-09-18_1312bfbdcecffdb9b7ef41a5b0882b09_cobalt-strike_ryuk
    .exe windows:10 windows x64 arch:x64

    8aa69bfb46216fa413519fb53924b2f9


    Headers

    Imports

    Exports

    Sections