Overview

overview

10

Static

static

10

9887a513b1...e3.dll

windows7_x64

3

9887a513b1...e3.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9887a513b16ab661aabdf578ba8b60ca90d042a505710e357fe6f4a0dd08ade3

  • Size

    208KB

  • Sample

    201112-4er7vltcc6

  • MD5

    3b938742cb476f22f9a8cb10f56e49c1

  • SHA1

    b42eaf210ca625cbd9ea0be256e7c9c3f60aaa77

  • SHA256

    9887a513b16ab661aabdf578ba8b60ca90d042a505710e357fe6f4a0dd08ade3

  • SHA512

    cfae784948a4f7164925f94fe57d2dddd41150d45900041e36022192fe379377dbbf7a2cd357551ffb5da5a1359efa769c07b8f64b3c7ae71cb4d5139e7867ce

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Targets

    • Target

      9887a513b16ab661aabdf578ba8b60ca90d042a505710e357fe6f4a0dd08ade3

    • Size

      208KB

    • MD5

      3b938742cb476f22f9a8cb10f56e49c1

    • SHA1

      b42eaf210ca625cbd9ea0be256e7c9c3f60aaa77

    • SHA256

      9887a513b16ab661aabdf578ba8b60ca90d042a505710e357fe6f4a0dd08ade3

    • SHA512

      cfae784948a4f7164925f94fe57d2dddd41150d45900041e36022192fe379377dbbf7a2cd357551ffb5da5a1359efa769c07b8f64b3c7ae71cb4d5139e7867ce

    Score
    10/10
    cobaltstrikebackdoortrojan

    • Cobaltstrike

      Detected malicious payload which is part of Cobaltstrike.

      trojanbackdoorcobaltstrike

    • ServiceHost packer

      Detects ServiceHost packer used for .NET malware

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks