Overview

overview

10

Static

static

10

35d96a405f...12.exe

windows7-x64

10

35d96a405f...12.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    35d96a405f183ec97f115a1f02633113b28b7f4e64514931e6caec61e7315012

  • Size

    124KB

  • MD5

    b3f4ae22b0d07a846611008f9c5d5ce5

  • SHA1

    17bc134a26141e1c54fb70265c4921fdd266ee5f

  • SHA256

    35d96a405f183ec97f115a1f02633113b28b7f4e64514931e6caec61e7315012

  • SHA512

    31d23708499ba3e89bcc0d7a0cdacd79634716ea3a0346181502c0c5d9eaff1c0ec1676434a51dff90d72d4a55c6224bc12eb6743461713ccd245bf98f0ffb1f

  • SSDEEP

    3072:6VFzp+Fd93lO4uH8I2XULEMSI1AeVudZ:X7r4c/XUjRq3

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.20.2:8989/QOOn

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; LBBROWSER)

Signatures

Files

  • 35d96a405f183ec97f115a1f02633113b28b7f4e64514931e6caec61e7315012
    .exe windows x64

    2fa4620e04d49e423019877137a3e412


    Headers

    Imports

    Sections