General

  • Target

    2024-10-05_ff14890c107f7597404c8eae3282a0c2_cobalt-strike_hijackloader_ryuk

  • Size

    27.6MB

  • MD5

    ff14890c107f7597404c8eae3282a0c2

  • SHA1

    4be1058e26a19f659d6c68cb621a2a16ce89f776

  • SHA256

    ba493c3c4c6fdb042996e8abe1eacc19b306cf3efddd969cbcfc17bda4cefae0

  • SHA512

    2eadc76c9dcbaba49de2ebb1754f433aba9603de2ff325ee5f5577af7dabe766b7b66ad90d31269996b1c5d78b4ede30eacfc2188b04fbdcc4e4662285cef626

  • SSDEEP

    393216:u9bQVj4y/KKWTJRmSQh2AYrjq/6yq0B4qUWBUQn9o2f03kND5/wPP8Mz:u9bk/9IESQhge/6F0BWW2QnGki8Mz

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-10-05_ff14890c107f7597404c8eae3282a0c2_cobalt-strike_hijackloader_ryuk
    .exe windows:5 windows x64 arch:x64

    c7125f57470fa6ec0132b5bcc3e2928c


    Headers

    Imports

    Sections