Overview

overview

10

Static

static

10

1774e47878...73.dll

windows7_x64

10

1774e47878...73.dll

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1774e47878695044939263df2d589f73

  • Size

    204KB

  • Sample

    201117-jkneh5wm9a

  • MD5

    1b9725fdae1037706cd17fdda9e86339

  • SHA1

    649e1cd0d87a9c44156dd797c8c6b06cfc55a564

  • SHA256

    0343fcbdc5e1581dbeec5a963f171a8b16b047dfdd7ea0f6122120250b0f068d

  • SHA512

    ed7780f5ca3c35465f0fc2aa3f14a76cbda92e7f0f2e1e63f32556b2ce5b8f3ea6e7c2d00f334b31a5b30b4adf40d4d1a0dd5b4eebce19dc9a1a6da1c40de1af

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Targets

    • Target

      1774e47878695044939263df2d589f73

    • Size

      204KB

    • MD5

      1b9725fdae1037706cd17fdda9e86339

    • SHA1

      649e1cd0d87a9c44156dd797c8c6b06cfc55a564

    • SHA256

      0343fcbdc5e1581dbeec5a963f171a8b16b047dfdd7ea0f6122120250b0f068d

    • SHA512

      ed7780f5ca3c35465f0fc2aa3f14a76cbda92e7f0f2e1e63f32556b2ce5b8f3ea6e7c2d00f334b31a5b30b4adf40d4d1a0dd5b4eebce19dc9a1a6da1c40de1af

    Score
    10/10
    cobaltstrikebackdoortrojan

    • Cobaltstrike

      Detected malicious payload which is part of Cobaltstrike.

      trojanbackdoorcobaltstrike

    • ServiceHost packer

      Detects ServiceHost packer used for .NET malware

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks