General

  • Target

    a269919b69de291e7ae3197cea329d09_cobalt-strike_cobaltstrike_meterpreter_JC.exe

  • Size

    204KB

  • MD5

    a269919b69de291e7ae3197cea329d09

  • SHA1

    5d7a5b672960143fa094e2578290d144050d1900

  • SHA256

    6431d2009116ebc5152e02c1cf8071390993db392da18e0377f47230d6369e09

  • SHA512

    1e93ed3b48457b5fb485ec35c1c0116b9ee7e60dec1d65aa64af09d88326c8463d126add9c9e2dc89df9e1dc6fe6166059c38168858ce8fa0ff4ce7b47b510aa

  • SSDEEP

    3072:iFna2JSkcrnYSdM50RAXSPy0qUiS0Lxh5H4evyzIhjQUD5:URYkcrY4MCIt07iPlvUYj

Score
10/10

Malware Config

Signatures

  • Cobalt Strike reflective loader 1 IoCs

    Detects the reflective loader used by Cobalt Strike.

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a269919b69de291e7ae3197cea329d09_cobalt-strike_cobaltstrike_meterpreter_JC.exe
    .dll windows x86


    Headers

    Sections