General

  • Target

    0eac6a2ea5ec5ac652a3df8baaa921ff_cobalt-strike_cobaltstrike_meterpreter_JC.exe

  • Size

    206KB

  • MD5

    0eac6a2ea5ec5ac652a3df8baaa921ff

  • SHA1

    8e8e8aa591ffce4013b28c01c3fa75482a091d1a

  • SHA256

    4cc4df88c595f531fee6c870a2abf6d6afbefc0de82d647f90717153c173fe66

  • SHA512

    97b41c5a3d42d46d27192350fed615776a85f578286513e3624658741ae50c0821de191f5ec53d7eba5aa4152c1a63d99407e49897fe9a8c0e57c661606afcd1

  • SSDEEP

    3072:44orlbXuKpgxInzi8Ct1d9MUM2RNIkKIRhfGljVUw5is:47XuugK+8CH8UlR7RhfmjH

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

Botnet

0

Attributes
  • watermark

    0

Signatures

  • Cobalt Strike reflective loader 1 IoCs

    Detects the reflective loader used by Cobalt Strike.

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0eac6a2ea5ec5ac652a3df8baaa921ff_cobalt-strike_cobaltstrike_meterpreter_JC.exe
    .dll windows x86


    Headers

    Sections