General

  • Target

    8482245bf5b9b681e498673fbe2ded9f.exe.vir

  • Size

    264KB

  • MD5

    3cb6d06e3fcbc7cd91628a017619cb91

  • SHA1

    66e9650c99ffbc759b3b85521780b1e50abe6129

  • SHA256

    52e2882c21ab4d08f6595ea3d8a2fe3dc5fc99fbee883031ce24d467d441a0a1

  • SHA512

    f4727a5d68a7f06d0ff61a36c123313d41a14ceb280328d264b99b6baea0ee42aeed73b6a317266728e070458fa4bb919efa2b9ddccf9285101986c26ddfdc84

  • SSDEEP

    3072:723jyrPJocu2EQlCz7WuLyA9ay0eTKNqFEoLDBLWbrl05XoY46BU4spYR9r:6e7Cn2dlCPWuL9ayLKeJLWQohlRc9r

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://43.138.112.112:8080/Ne3w

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; BOIE9;ENUSMSCOM)

Signatures

Files

  • 8482245bf5b9b681e498673fbe2ded9f.exe.vir
    .exe windows x64

    cf2314ac1267136ee3251647968e4f72


    Headers

    Imports

    Sections