General

  • Target

    2024-09-20_0a785138fdc9e239a1c161dcf8c27883_cobalt-strike_ryuk

  • Size

    910KB

  • MD5

    0a785138fdc9e239a1c161dcf8c27883

  • SHA1

    0a441f3f7ffe940641d5b2246f9c92ae3a285907

  • SHA256

    5a30c11bf318ca9dfa9d3f22560ad6988dbb1a75665bf99db47bce64f8b85022

  • SHA512

    c704da1fa053c9cd0f36f96dca3d54a7ca7877422436f77ebd84e21f6aa1337844a26d0e405dc5ada33f6dcf2e611be5af300554e7a2d1e2408a72e39a651e91

  • SSDEEP

    12288:hJdkW4kYmpHqsLxQmX23ONhg1a5deAKgCNbzMkAuPM:hF4kYEH3x9ThFee

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-09-20_0a785138fdc9e239a1c161dcf8c27883_cobalt-strike_ryuk
    .exe windows:6 windows x64 arch:x64

    72b4ead739876ee39577bab90c434b27


    Headers

    Imports

    Exports

    Sections