General

  • Target

    1d3200091487235bda4a370a8e950206_cobalt-strike_cobaltstrike_meterpreter_JC.exe

  • Size

    205KB

  • MD5

    1d3200091487235bda4a370a8e950206

  • SHA1

    1267d3aec342b8ae696e0b2e402e460ea2c1b369

  • SHA256

    b04bc91a98679c8d145b4c8e1894e8f62396e5b199dfdebd3f89446eb92a62cf

  • SHA512

    54eed2ba0224044dd7f5ba1621eaf6c32141697128ade5598d3f91093f7a9d06bdb1bb387e8af5862b3a14dd81511cd9b7fc159c450a9650ecd23fbf0599254d

  • SSDEEP

    3072:TMBMo5PM+Efcc4Smqj8CMApfmgHoMCbBkuA/S9P1TDg1jlUX75i:TMTEfJ4HK8CMCfHoMC9VP1/Ejqw

Score
10/10

Malware Config

Signatures

  • Cobalt Strike reflective loader 1 IoCs

    Detects the reflective loader used by Cobalt Strike.

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1d3200091487235bda4a370a8e950206_cobalt-strike_cobaltstrike_meterpreter_JC.exe
    .dll windows x86


    Headers

    Sections