General
-
Target
15290db841c2f2642bb549c25e1eae5a_cobalt-strike_cobaltstrike_meterpreter_JC.exe
-
Size
206KB
-
MD5
15290db841c2f2642bb549c25e1eae5a
-
SHA1
01488aaae070d64f6210dc831725684830a41c9a
-
SHA256
1cee69e63b6c628d163755ec156e5eba9a42dc4235f53fe11359e2aa40c4fc14
-
SHA512
e7467ebc390acaedd09ab8c1cf79f02bfa5dada378854f05cfc1faabdea14351646ba4fe3310915c3fe7b710cd587a42195ccb2197084e3b5ef1236a4397f969
-
SSDEEP
3072:HJ1IVpXuQW3783iDD8CsfbQ+HhqSHjIMnKfWbEPRjlUO05C:HuXuH3PP8Cofh1HjHbEpj1
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
Botnet
0
Attributes
-
watermark
0
Signatures
-
Cobalt Strike reflective loader 1 IoCs
Detects the reflective loader used by Cobalt Strike.
-
Cobaltstrike family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
15290db841c2f2642bb549c25e1eae5a_cobalt-strike_cobaltstrike_meterpreter_JC.exe
Headers
Sections