General
- Target 2024-11-09_6014da73b640f8c78e7e31e7af63dd01_cobalt-strike_ryuk
- Size 1.8MB
- Sample241109-197ypswpbk
- SHA256 789724d85a314d962e8e9526d98bb6ea752f41287b0c3b92d9c51025f5c806f8
- MD5 6014da73b640f8c78e7e31e7af63dd01
- SHA1 74bcaa045dd8031fb648f41751b1c55301db7f86
- SHA512 f9f9385183c08d2501dc106357cd7da18b702dd5cc98b39911c566dc61eb6b178c8b16b77e05624348a4c40912cb2ea7d740d87622d855537d2ff5cfc1ec395d
- SSDEEP 49152:hKfuPS3ELNjV7IZxEfOfOgwf0NgDUYmvFur31yAipQCtXxc0H:im9sZxwgMU7dG1yfpVBlH
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2024-11-09_6014da73b640f8c78e7e31e7af63dd01_cobalt-strike_ryuk.exe
Resource
win7-20240903-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 2024-11-09_6014da73b640f8c78e7e31e7af63dd01_cobalt-strike_ryuk
- Size 1.8MB
- SHA256 789724d85a314d962e8e9526d98bb6ea752f41287b0c3b92d9c51025f5c806f8
- MD5 6014da73b640f8c78e7e31e7af63dd01
- SHA1 74bcaa045dd8031fb648f41751b1c55301db7f86
- SHA512 f9f9385183c08d2501dc106357cd7da18b702dd5cc98b39911c566dc61eb6b178c8b16b77e05624348a4c40912cb2ea7d740d87622d855537d2ff5cfc1ec395d
- SSDEEP 49152:hKfuPS3ELNjV7IZxEfOfOgwf0NgDUYmvFur31yAipQCtXxc0H:im9sZxwgMU7dG1yfpVBlH
- MD5 SHA1 SHA512 SSDEEP
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory