Overview

overview

10

Static

static

10

02e2e55b18...0a.exe

windows7-x64

10

02e2e55b18...0a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    02e2e55b18f446ae7058f2d31a8d6eb733883a4980892ba431b792856c18860a

  • Size

    70KB

  • MD5

    89d3ce72b7dd94f78622a01f5cb33e93

  • SHA1

    637745c7b98306b72a95575238b425f42ab0009d

  • SHA256

    02e2e55b18f446ae7058f2d31a8d6eb733883a4980892ba431b792856c18860a

  • SHA512

    b52d9fff2acff7177985b4838a34c14d75303d7abf0061c5d91b341826c0fa5a607b715cae1c72410938743cf6956b1286780a8c40215b951a8646d58709725c

  • SSDEEP

    384:FDCKNCwEQYvXpyyeSkiaQalYGnAO7iTDCUSbULWBdI/JHE9MmhHp8GIlNeK7QfB+:pE9vX7kpQaUgb2nod1pVIlITB1qA8b

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.7.130:6777/SiTM

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; yie9)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 02e2e55b18f446ae7058f2d31a8d6eb733883a4980892ba431b792856c18860a
    .exe windows x64

    b4199b19373870ba62a3af4d52b22c08


    Headers

    Imports

    Sections