Overview

overview

10

Static

static

10

2083b575bc...38.dll

windows7_x64

3

2083b575bc...38.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2083b575bca73c7b9711a8196b5d74fa2c32225c978881794449e0f96eab7538

  • Size

    199KB

  • Sample

    201115-tqbd73bs12

  • MD5

    5d0bbc4db7f2771b87c4aa5389381a3a

  • SHA1

    82a9e68b18f84c31b71cecbdf1f983067b70ec06

  • SHA256

    2083b575bca73c7b9711a8196b5d74fa2c32225c978881794449e0f96eab7538

  • SHA512

    797052afcefd402423b9112aa968eaf9b7c2998f525ad9347ee86f4d0c8336f5f52ce9c5ba2a5c3bebe1b142fdc47b141414a0125e8e2fe1d3a285122bbb20a3

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Targets

    • Target

      2083b575bca73c7b9711a8196b5d74fa2c32225c978881794449e0f96eab7538

    • Size

      199KB

    • MD5

      5d0bbc4db7f2771b87c4aa5389381a3a

    • SHA1

      82a9e68b18f84c31b71cecbdf1f983067b70ec06

    • SHA256

      2083b575bca73c7b9711a8196b5d74fa2c32225c978881794449e0f96eab7538

    • SHA512

      797052afcefd402423b9112aa968eaf9b7c2998f525ad9347ee86f4d0c8336f5f52ce9c5ba2a5c3bebe1b142fdc47b141414a0125e8e2fe1d3a285122bbb20a3

    Score
    10/10
    cobaltstrikebackdoortrojan

    • Cobaltstrike

      Detected malicious payload which is part of Cobaltstrike.

      trojanbackdoorcobaltstrike

    • ServiceHost packer

      Detects ServiceHost packer used for .NET malware

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks