General

  • Target

    2024-10-17_0e32e92200a3667d54c1a60e67f6c839_cobalt-strike_ryuk

  • Size

    2.2MB

  • MD5

    0e32e92200a3667d54c1a60e67f6c839

  • SHA1

    8c92f258dc82433e5562754da801cefa3b0efd4f

  • SHA256

    ce94f83b1a92241e98798d6f5effbb5db5c992ff5f93d22e87e4e4b62051b6bc

  • SHA512

    6e973466c0ad72cf2d803cebcbe890c69e292d5b5a998c6da1afa16689f56beca314917c1d911d221e9f7b7cedef1bb05169e3db541f0bce4ee693d99d109902

  • SSDEEP

    49152:XncpbhJI9QlMv3jnhclJAvUPExtaqzje30jaNf1TWbdz:dVclqZU023W

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-10-17_0e32e92200a3667d54c1a60e67f6c839_cobalt-strike_ryuk
    .exe windows:5 windows x64 arch:x64

    5fce2a32b4f91649c0218ad74dc15989


    Headers

    Imports

    Exports

    Sections