General
- Target 2024-10-22_7b31a6e8fd74c0c5b7de75d14b5c9869_cobalt-strike_ryuk
- Size 1.8MB
- Sample241022-ejjbrswbqe
- SHA256 33a113c9abd6979683c124ea981772968bd40d1187fa3120920e66986c95ff1d
- MD5 7b31a6e8fd74c0c5b7de75d14b5c9869
- SHA1 2626590095c5704b75d16f9e21e0ac368cb6064d
- SHA512 24c77a928040db9c933be82b760fc24e36381652cac2708282ea1e44b19649be9a1a33149ce074dd21eb0b9cb1a8787f78899bb64ffff37bba2c87e6c9f3476c
- SSDEEP 49152:eKfuPS3ELNjV7SZxEfOfOgwf0/xlMPdlR8v4UC0Eg6ET7M/I:pm9OZxwgpl2/V0cETQ/I
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2024-10-22_7b31a6e8fd74c0c5b7de75d14b5c9869_cobalt-strike_ryuk.exe
Resource
win7-20241010-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-10-22_7b31a6e8fd74c0c5b7de75d14b5c9869_cobalt-strike_ryuk
- Size 1.8MB
- SHA256 33a113c9abd6979683c124ea981772968bd40d1187fa3120920e66986c95ff1d
- MD5 7b31a6e8fd74c0c5b7de75d14b5c9869
- SHA1 2626590095c5704b75d16f9e21e0ac368cb6064d
- SHA512 24c77a928040db9c933be82b760fc24e36381652cac2708282ea1e44b19649be9a1a33149ce074dd21eb0b9cb1a8787f78899bb64ffff37bba2c87e6c9f3476c
- SSDEEP 49152:eKfuPS3ELNjV7SZxEfOfOgwf0/xlMPdlR8v4UC0Eg6ET7M/I:pm9OZxwgpl2/V0cETQ/I
- MD5 SHA1 SHA512 SSDEEP
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory