General

  • Target

    2024-09-30_6cb4d065f0f980a3190a132f84243bc9_cobalt-strike_ryuk

  • Size

    1.6MB

  • MD5

    6cb4d065f0f980a3190a132f84243bc9

  • SHA1

    b7399c70f93173d1ac26c75140f0deb5144f084a

  • SHA256

    e3666ea8a6a48f7ef0c566237872d68252a807b8ee889507c41501889d50882c

  • SHA512

    40d5a95e0e9cad439d187458847210f71a15eeb713024335b0dbab5f02e5b843e191bd98d84c7319a718a06f63b924c23be09e67cb5a1c1cdc420f41b2edc9f1

  • SSDEEP

    24576:1VT0AYyRE9Wv/tEX6PoC0jIMuTsqjnhMgeiCl7G0nehbGZpbD:110AYDWvyXGohjIMaDmg27RnWGj

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-09-30_6cb4d065f0f980a3190a132f84243bc9_cobalt-strike_ryuk
    .exe windows:5 windows x64 arch:x64

    ed3445bd48c8bf884ee6218cb9ade0fb


    Headers

    Imports

    Exports

    Sections