General

  • Target

    194c64a7273cb6be0ac5ff88db41c638aeea5b4f2e4883ee594aaea235a1ba90

  • Size

    60KB

  • MD5

    15a3217e764842531b7251c628f80d01

  • SHA1

    8b618efa533c7dca53e45abdbee8c18519f0c5f7

  • SHA256

    194c64a7273cb6be0ac5ff88db41c638aeea5b4f2e4883ee594aaea235a1ba90

  • SHA512

    ef5cce9fd02000c0c317dc8d458e68b092af1b719924d3155b4c7c76b3dca73b224ab1e6bcf7bf9245b140f83cea69d229dd98e23b9376d99aefc08d12814a61

  • SSDEEP

    384:D30GFeTtXY7y5++FidhKIXyNl2Q1HR9+GYylSPKAxlwQfBXbg95OfP89Z5N:D3JOIy5+lhGREklJAxlhBLgcP89

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://81.70.152.197:80/Sap9

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; BOIE9;ENGB)

Signatures

Files

  • 194c64a7273cb6be0ac5ff88db41c638aeea5b4f2e4883ee594aaea235a1ba90
    .exe windows x64

    c3035865609dd4a257db5ba76e3aa1a4


    Headers

    Imports

    Sections