Overview

overview

10

Static

static

10

6d53843bd8...6c.exe

windows7-x64

10

6d53843bd8...6c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6d53843bd8675610bcee91bb628ea393405390de36c571b7f83e1ce2fa09c26c

  • Size

    60KB

  • MD5

    ff850325ab4c98547c2d256295aef798

  • SHA1

    f2409fb8bb15b2f332ffb1ccfcd8ac02aaae164b

  • SHA256

    6d53843bd8675610bcee91bb628ea393405390de36c571b7f83e1ce2fa09c26c

  • SHA512

    f6e896d0a0b212956f8921b113e32ab9bedaca18b7a1595a63824fce4745d00e396ce4f340376d63c676e503bc2fab6bc67ac3c81518670bae0d1844596481a8

  • SSDEEP

    384:hB0ieTzsZ7ycwAyhpImCLeixjIHefnqR2FTCBekIAQfBX/5XsP89Z57:AsRycp/d4wZN0IRBP58P89

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.19.128:80/xJXC

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6d53843bd8675610bcee91bb628ea393405390de36c571b7f83e1ce2fa09c26c
    .exe windows x64

    163ce2df9024e88008cef6545abde321


    Headers

    Imports

    Sections