General
-
Target
0bfa6cc5e14f32825b93a6bf343ab057_cobalt-strike_cobaltstrike_meterpreter_JC.exe
-
Size
218KB
-
MD5
0bfa6cc5e14f32825b93a6bf343ab057
-
SHA1
f2762dbac33d772335f2be80a67cd557479b7aa8
-
SHA256
63e574bd20199d78ebb3e17d28c1306680a695a5a9d3ee16e28f113ee12d3023
-
SHA512
879f23f449432aa452d6bbace3bf312721eded8034d857679f484a8bce2e840c5f203107e7f44191dd5b75f2a6a193365ebbfd6ba14e6ec8e23e303f031343e3
-
SSDEEP
3072:3zeXFx+SYu14oat8IwUnIXpyCO4+FnQfSvsfm/VpjNUOVy5E:3z5nK4oQ8IVnOyd4oQPfm/zjH
Score
10/10
Malware Config
Signatures
-
Cobalt Strike reflective loader 1 IoCs
Detects the reflective loader used by Cobalt Strike.
-
Cobaltstrike family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
0bfa6cc5e14f32825b93a6bf343ab057_cobalt-strike_cobaltstrike_meterpreter_JC.exe
Headers
Sections