Overview

overview

10

Static

static

10

e9feca1aef...44.dll

windows7_x64

10

e9feca1aef...44.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e9feca1aefb5369e43fe1d88c3c9f038b245ba66bb6f99deefa093ab4efe8f44

  • Size

    206KB

  • Sample

    201115-dx38l7zxgn

  • MD5

    f29175af254d5f0fd16db7a7c751442b

  • SHA1

    24348191d585f720633af637f6f3918c97aca884

  • SHA256

    e9feca1aefb5369e43fe1d88c3c9f038b245ba66bb6f99deefa093ab4efe8f44

  • SHA512

    d6a6722ff48579622673240e3d57a63bc85e7d3a5397f89d395ae26271db6a8d54137d01799af7a374e0a190af8a7ac5a46e9526c6e9f9a0b74989617550b036

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Targets

    • Target

      e9feca1aefb5369e43fe1d88c3c9f038b245ba66bb6f99deefa093ab4efe8f44

    • Size

      206KB

    • MD5

      f29175af254d5f0fd16db7a7c751442b

    • SHA1

      24348191d585f720633af637f6f3918c97aca884

    • SHA256

      e9feca1aefb5369e43fe1d88c3c9f038b245ba66bb6f99deefa093ab4efe8f44

    • SHA512

      d6a6722ff48579622673240e3d57a63bc85e7d3a5397f89d395ae26271db6a8d54137d01799af7a374e0a190af8a7ac5a46e9526c6e9f9a0b74989617550b036

    Score
    10/10
    cobaltstrikebackdoortrojan

    • Cobaltstrike

      Detected malicious payload which is part of Cobaltstrike.

      trojanbackdoorcobaltstrike

    • ServiceHost packer

      Detects ServiceHost packer used for .NET malware

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks