Overview

overview

10

Static

static

10

44.exe

windows7-x64

10

44.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    44.exe

  • Size

    5.7MB

  • MD5

    9bc3ff2d88a765a54188c96b23bdfd3c

  • SHA1

    8dc0d3e85f06d754e068a95cb8478607e35fae62

  • SHA256

    6d540802b03f7abfe0e574257fe67d7c46db6fcbc7977688f0f64b4ff3c77d2f

  • SHA512

    c6d80bda62fb3d3f23281c27d3157206eb806fe05c648446a40fcae1ccedfe581efe02daf591226fa4355adbcfbf1d69f049047fcd817af5d00222a6b6ac8ada

  • SSDEEP

    98304:dVBL6n46gxZpzoLLJ3TbwaVvrZE0I8LKI8F/Vtt1mIi3pRN8D8cXuAKOHgMK1TbQ:dbL6n49xZ9onJ5hrZEce9tGPqKNjMCTP

Score
10/10
pyinstallercobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://47.96.174.24:88/jxE6

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; Touch; MASPJS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 44.exe
    .exe windows x64

    a6cec5b1a631d592d80900ab7e1de8df


    Headers

    Imports

    Sections

  • shellcode.pyc