Overview

overview

10

Static

static

10

40d2a7f006...ca.dll

windows7_x64

10

40d2a7f006...ca.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    40d2a7f006a53880defa45870077ce32be8ff5144a6e567a59d33032d8ce38ca

  • Size

    206KB

  • Sample

    201112-5zccy1vx8x

  • MD5

    151daba1d194acb8d5a42cafaaaf19be

  • SHA1

    57a8f4a65d7f8a186311d0643d01bd4416098ff2

  • SHA256

    40d2a7f006a53880defa45870077ce32be8ff5144a6e567a59d33032d8ce38ca

  • SHA512

    812f210d0d6e5461e31919655bb2fa873f07e939338a9caea5cad2c0ff0d440d3302c44a6e0729e195702237bcb5a05bfc09e43dfc133cb9826c2988a5bd8390

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Targets

    • Target

      40d2a7f006a53880defa45870077ce32be8ff5144a6e567a59d33032d8ce38ca

    • Size

      206KB

    • MD5

      151daba1d194acb8d5a42cafaaaf19be

    • SHA1

      57a8f4a65d7f8a186311d0643d01bd4416098ff2

    • SHA256

      40d2a7f006a53880defa45870077ce32be8ff5144a6e567a59d33032d8ce38ca

    • SHA512

      812f210d0d6e5461e31919655bb2fa873f07e939338a9caea5cad2c0ff0d440d3302c44a6e0729e195702237bcb5a05bfc09e43dfc133cb9826c2988a5bd8390

    Score
    10/10
    cobaltstrikebackdoortrojan

    • Cobaltstrike

      Detected malicious payload which is part of Cobaltstrike.

      trojanbackdoorcobaltstrike

    • ServiceHost packer

      Detects ServiceHost packer used for .NET malware

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks