Overview

overview

10

Static

static

10

9f7dbca947...57.dll

windows7_x64

10

9f7dbca947...57.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9f7dbca9473e170731126ec24542e29dd81c468a8b4c1cd9cfd88b048e30e657

  • Size

    204KB

  • Sample

    201111-k73swgka4e

  • MD5

    2af0472fb41dc374a7ba42b40c89ab1e

  • SHA1

    20190a5f93334b6262b2994a5abbbd6c79e45c57

  • SHA256

    9f7dbca9473e170731126ec24542e29dd81c468a8b4c1cd9cfd88b048e30e657

  • SHA512

    c6374b2cf38bd7a2f9baea64877970136a0ab365e080c71ab4e140044b344b50a39b84842fc330125aaf95864dacc584795ebb59a55a57102fd4d7eac869ed1c

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Targets

    • Target

      9f7dbca9473e170731126ec24542e29dd81c468a8b4c1cd9cfd88b048e30e657

    • Size

      204KB

    • MD5

      2af0472fb41dc374a7ba42b40c89ab1e

    • SHA1

      20190a5f93334b6262b2994a5abbbd6c79e45c57

    • SHA256

      9f7dbca9473e170731126ec24542e29dd81c468a8b4c1cd9cfd88b048e30e657

    • SHA512

      c6374b2cf38bd7a2f9baea64877970136a0ab365e080c71ab4e140044b344b50a39b84842fc330125aaf95864dacc584795ebb59a55a57102fd4d7eac869ed1c

    Score
    10/10
    cobaltstrikebackdoortrojan

    • Cobaltstrike

      Detected malicious payload which is part of Cobaltstrike.

      trojanbackdoorcobaltstrike

    • ServiceHost packer

      Detects ServiceHost packer used for .NET malware

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks