Overview

overview

10

Static

static

10

0f42363ac7...72.exe

windows7-x64

10

0f42363ac7...72.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0f42363ac7c021361fb8577a2849160353432d2ee3fa15fa718e6d1ad474d072

  • Size

    2.2MB

  • MD5

    6db52c6f51326e1651e07c23e80d33e1

  • SHA1

    1b4b8d9190269d8ce57f4d9c68ac4995678a75ad

  • SHA256

    0f42363ac7c021361fb8577a2849160353432d2ee3fa15fa718e6d1ad474d072

  • SHA512

    d4626d56b5917ffd422d05469486c06513b2377762f750bcee0f88dcc1d65e25faa0bebba9705ae392a7c7a8b1d11e3323b42ee302a56cccdb0f08741c28b73a

  • SSDEEP

    24576:TgHXOUVe9hUB4aVVE3c+n0SJvB9wvbmYBLT2HCJ6clMi81s3AKwGh15:TgHXOX9hUB4aVVEW0C6IT2HuwGh15

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.126.135:80/M5nm

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MASP)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f42363ac7c021361fb8577a2849160353432d2ee3fa15fa718e6d1ad474d072
    .exe windows x64

    d965a9ce1f3703f07ef48e3c3662b03f


    Headers

    Imports

    Sections