Overview

overview

10

Static

static

10

a9ed12ebc6...6d.exe

windows7-x64

3

a9ed12ebc6...6d.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    a9ed12ebc641905dc028724a431e2f334f77f412d83cf519abff03d9b65ba86d

  • Size

    157KB

  • MD5

    0bed79c530bd40ea6e8d82e322a5b0b1

  • SHA1

    6b157e02232f0878199a1e277e48d9eb64ad5c6b

  • SHA256

    a9ed12ebc641905dc028724a431e2f334f77f412d83cf519abff03d9b65ba86d

  • SHA512

    223041cb6e98e17aa9d06a11c73f10317e3986f0baaad1786ed2ac1c8e51561ba953ebcc99f92e09293c8a65857af49fb6aad5ffa490d44a5213be772a8d719d

  • SSDEEP

    3072:Bg+bds5LINkBCaN+es3iZCr9/vZ9t+AmxHUps:q8ds5LINICNesSZCr9HtHiUp

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.106.128:14132/bV3r

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; MAM2)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a9ed12ebc641905dc028724a431e2f334f77f412d83cf519abff03d9b65ba86d
    .exe windows x64

    7b5218ad15e42f3c488f5acd2935126a


    Headers

    Imports

    Sections