Overview

overview

10

Static

static

1

a58150ce39...3b.exe

windows7-x64

10

a58150ce39...3b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0212ad8f93405ad10af5abad3b5e8ae5.bin

  • Size

    12KB

  • Sample

    230321-bcmh3agb26

  • MD5

    b9ebe1a529fdede3fafc1cdb37ffbac9

  • SHA1

    18e1d556153726a0f77edb7a064ad0a15a7e486c

  • SHA256

    1dcdc099aebef579055a842a620fd43cb43a9d7f112faf9170f8451f3ebd161a

  • SHA512

    373e8d36509184034462078ff44eee39687fd24e46577536fae80610a9a445881c1ad567f7c3f5308d62684cb74fd156b9b34738a197dd3fe4d6149ffce8a8cf

  • SSDEEP

    384:+UXsfgP5/xrM7cWj/kF8yblwPRS1A1vOl2d8kXbuj:rXeI5lM7/kFXoYWxOW8au

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://117.50.163.24:8443/wEp1

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; MAARJS)

Targets

    • Target

      a58150ce39e22e8e67f9b582c3064cd8701cdabb4f1ac7ae22c8fc6e0bc2e93b.exe

    • Size

      24KB

    • MD5

      0212ad8f93405ad10af5abad3b5e8ae5

    • SHA1

      c9cbaf6b9caff6e02dc43f2ec782d5e24a4852f1

    • SHA256

      a58150ce39e22e8e67f9b582c3064cd8701cdabb4f1ac7ae22c8fc6e0bc2e93b

    • SHA512

      9af37cc965b2efd0f3dff64ad71b38d832befd30091221a5fa760548857602c9efed8f793992044c6b7733c92526b4a2ef1dbf1a7ee80d792293700e00e6682b

    • SSDEEP

      384:qqaCF31cix+Dc4zjuwPLZCFF46gioZUHeMDnG:gMFV+DjrLZ08X

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks