General

  • Target

    cfd44d46a4b7533688515c57f9b93126425ef5a2afe29d16a70647cb0f65731b

  • Size

    421KB

  • MD5

    1fa1353fa8a0571dbbe0ede8f7cf931c

  • SHA1

    70e90fbb032ece148d90f196abac445f2ba0ccdc

  • SHA256

    cfd44d46a4b7533688515c57f9b93126425ef5a2afe29d16a70647cb0f65731b

  • SHA512

    b29bf59fed20e0d75a1a11ab26db87ac445887c8b49cefe82b1b448ef242addd81bb1efdde0c65661a77d6461000e17bd9b92ba58492fe90e9a0505330b1c4e1

  • SSDEEP

    12288:d1HF0DVfqyhFXmMn6o4pubIem9Th8Uw8idv:d1HF0DVfqyhFXmMn6o4pubIerZdv

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://��H�� H��AYAYPPPPM1�AQH���:281314120H��A��]����H�� H�� XXXXH��A�Ɩ�R�ջ�* A�������H��(<| ���u�Groj

http://A�s��l��H�� H��:2202588671A�������H��(<| ���u�Groj

Attributes
  • user_agent

    .dll

Signatures

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cfd44d46a4b7533688515c57f9b93126425ef5a2afe29d16a70647cb0f65731b
    .exe windows x64

    681d4c11b90c6ee1c8a7260cf251cb52


    Headers

    Imports

    Sections