General

  • Target

    b0dec9d9c46cc592ec7efaec225d07f1db5b3c4de9dedb05768071b43583e124

  • Size

    680KB

  • MD5

    3ca4a86af00d92e238610328745f2f33

  • SHA1

    5f0b0cd0811f36650493510c43828cf17a52acfc

  • SHA256

    b0dec9d9c46cc592ec7efaec225d07f1db5b3c4de9dedb05768071b43583e124

  • SHA512

    7df55413d884c374cbc73b2b0a494665487743f16fb1d31c8703de4749761dccf2833515c61a6ac291feacd735dc142eb05df193a7b948528f38da6b1aaa9dad

  • SSDEEP

    6144:OTG3PneL2L8EMbiRImHjMxgPAM25k+dc9A7:jPeL2rMbimxg4OGcu7

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.136.128:8080/uAaF

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)

Signatures

Files

  • b0dec9d9c46cc592ec7efaec225d07f1db5b3c4de9dedb05768071b43583e124
    .exe windows x64

    ebaab6aff9bcf37c647f4b4a5a2431c7


    Headers

    Imports

    Sections