General

  • Target

    2024-12-19_9ce4f1cabf815eec94bb03bfa5652147_cobalt-strike_ryuk

  • Size

    1.6MB

  • MD5

    9ce4f1cabf815eec94bb03bfa5652147

  • SHA1

    00d29f0572eff20e61e2fa7bec0c74a3dbc17f58

  • SHA256

    5aaea590e622e50b8df6265877e933263b91cb32aa978dbd2bf6138b9d4df01d

  • SHA512

    2bf26390847da8b81cd50d9095ad077e91b243050bca012fe0f1247ea2f3ffdd50e785db2a164a97dc676c2420428f3446f4cb4a16029a6a711bd8392ecd853d

  • SSDEEP

    49152:yQD3Y5JEJ6XneTAs3DF/++TPyJA2DxO3QTmdQQ:yV2CUAsKUemdp

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/reverse_tcp

C2

192.168.100.40:443

Signatures

Files

  • 2024-12-19_9ce4f1cabf815eec94bb03bfa5652147_cobalt-strike_ryuk
    .exe windows:6 windows x64 arch:x64

    5f179977b2789a197ac1e0c160228fd4


    Code Sign

    Headers

    Imports

    Sections