Overview

overview

10

Static

static

1

b20bf873b3...39.exe

windows7-x64

10

b20bf873b3...39.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b20bf873b3decaecccadefd88ebb391d682b37e0c7d7d6bb942c630a4ad30739.zip

  • Size

    105KB

  • Sample

    230321-rw77wadb5v

  • MD5

    7e2ce3494e8766cea0b077c7608117af

  • SHA1

    8fc56b680146d799d0112d0c6f6b23af7bc139d9

  • SHA256

    2a3037610a6e49c067cffd72df6cdd489e38fae5574e592b2215a0b4c67989b6

  • SHA512

    f15fa1731f5d7168890194b2af9cb0c2712b3c7714fc071164e148911fe427363fbcc43508ff59eb00e3859303587a93cc9813ef0d33885017c3ea70714a23fe

  • SSDEEP

    3072:nlZhc4e8t/zFdxo6U0XuNHa9mLk5rX43glt9g+iyG2JgV:Xhc301VXXnXgr+iyjJM

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://duladani.com:443/wp-includes/favicon.gif

Attributes
  • user_agent

    Host: google.fr Connection: close Accept: image/jpeg Accept-Encoding: gzip, br User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_2) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9

Targets

    • Target

      b20bf873b3decaecccadefd88ebb391d682b37e0c7d7d6bb942c630a4ad30739.exe

    • Size

      192KB

    • MD5

      50637621d5070b868297ebea3d800480

    • SHA1

      5777bb47ee4898a7ce1dc46c86ba19e805fb102f

    • SHA256

      b20bf873b3decaecccadefd88ebb391d682b37e0c7d7d6bb942c630a4ad30739

    • SHA512

      38e1f374ddd95ade71d079231b0f19c8df36b18adf604bfe2395b1a0d3db394006b6700054d11fb22a6c2b7e3aa680b70a10f93d8389b3ffd616f583aaa5c770

    • SSDEEP

      3072:c0L2F+czJ4gjdrlRP5CPoDJMNXEepfjWEPY4vZhuGnrTTTr3EgEJmm:zKFDFRdrT5CPoDSX1fjWETPUDJmm

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks