Overview

overview

10

Static

static

3

b2a7fec5fe...a6.exe

windows7-x64

7

b2a7fec5fe...a6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b2a7fec5fe33c7912e2fa1526a2fd7f0e846b7526fcd927741482f6a2dba7fa6

  • Size

    5.6MB

  • Sample

    230808-f5zfjscc71

  • MD5

    79e0dd3abf50d73d55364ef52ea6f81d

  • SHA1

    4666db43192305cfdfe683bb406076424dbdad42

  • SHA256

    b2a7fec5fe33c7912e2fa1526a2fd7f0e846b7526fcd927741482f6a2dba7fa6

  • SHA512

    581d61782d530724d4389df4206a26f33842feb0673f423347dc2f1bc6c3b775d6916396150ead515bd6fea43b15fba17cbe187276d3cb41b5b0a80925617b95

  • SSDEEP

    98304:T8ED9D2uW5MI0md9g+DfJFnHunzDAZku99mwUarDZsdr+B:TRDML2Vmd6+DfJVAzDaku99mE5

Score
10/10
cobaltstrikebackdoorpyinstallertrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://120.48.28.170:7777/qpzyr6F5H926qSAQ4EAIn5E6Clq4hF8p

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; BOIE9;ENIN)

Targets

    • Target

      b2a7fec5fe33c7912e2fa1526a2fd7f0e846b7526fcd927741482f6a2dba7fa6

    • Size

      5.6MB

    • MD5

      79e0dd3abf50d73d55364ef52ea6f81d

    • SHA1

      4666db43192305cfdfe683bb406076424dbdad42

    • SHA256

      b2a7fec5fe33c7912e2fa1526a2fd7f0e846b7526fcd927741482f6a2dba7fa6

    • SHA512

      581d61782d530724d4389df4206a26f33842feb0673f423347dc2f1bc6c3b775d6916396150ead515bd6fea43b15fba17cbe187276d3cb41b5b0a80925617b95

    • SSDEEP

      98304:T8ED9D2uW5MI0md9g+DfJFnHunzDAZku99mwUarDZsdr+B:TRDML2Vmd6+DfJVAzDaku99mE5

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks