Overview

overview

10

Static

static

10

dc59a99152...fe.exe

windows7_x64

10

dc59a99152...fe.exe

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dc59a99152d6a326c32337cfece84ac3ac232d370b5f7051bcf02f274e8358fe

  • Size

    2.5MB

  • MD5

    b70608c6a2c35914470fba5b0b91cd61

  • SHA1

    43820909b30fac5c57ee4cf38790e7af75cdb18c

  • SHA256

    dc59a99152d6a326c32337cfece84ac3ac232d370b5f7051bcf02f274e8358fe

  • SHA512

    d5ef559ab8a85b76b3d2e0e32bc28dacea6136a9de405b612c601a9d7769dbe7955831ae96bf9216a8bf13cbad01c96239b8958cc6f7bd0045e9f519e95fdf0a

  • SSDEEP

    49152:Kcx+ow9Z4XwlA0yAX5GhTmgN7/QVfdyIdX:KckD9Z4AlPmZmgMlyId

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://139.196.112.7:80/l2xG

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/604.1.38

Signatures

Files

  • dc59a99152d6a326c32337cfece84ac3ac232d370b5f7051bcf02f274e8358fe
    .exe windows x64

    93a138801d9601e4c36e6274c8b9d111


    Headers

    Imports

    Sections