cobaltstrike | b04f8cad6598ee5d91f0ea82fc1b7d32[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b04f8cad6598ee5d91f0ea82fc1b7d32.bin
Size

200KB
MD5

573ced830912c31ed1792d45efd0837d
SHA1

d403e453ffa5f303f86d81fe821a4936536cf8b1
SHA256

34bfd801257f67ba5b3c8f0a3f090b04b517379cae2e3343f2d1202e9442db08
SHA512

b13429ad53168c2d20f1eca6029379c16a22fff21ca284cdd0ea07a358184887bc08721c178f6b153fae2916c23b586f67b945888999a681d5cbe71ed0eb0a6c
SSDEEP

6144:kTPDJzRnnQtVPxDgd3zVmj05ZhQnJRkm0PBcuaj2rW:A7/nnEPxDA3zVmKhQnfkmEaKrW

Score

10^/10

cobaltstrike

Malware Config

Signatures

Cobaltstrike family
cobaltstrike

Files

b04f8cad6598ee5d91f0ea82fc1b7d32.bin
.zip

Password: infected
93c6a7c0a60d7e4b19f3cf94fd8c28382cdc3aaaf008d494680041522c754ad8.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 234KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ