General

  • Target

    27ad5f3f753b5d99e0f052b7a3f1a333_cobalt-strike_cobaltstrike_meterpreter_JC.exe

  • Size

    204KB

  • MD5

    27ad5f3f753b5d99e0f052b7a3f1a333

  • SHA1

    9f41e480958e6c971d34eef2b9841cfd7dfe6961

  • SHA256

    0d18f613e9dc7fdd45022beed5c8000761a20bcf3a14613e551203c5159ee3d4

  • SHA512

    c2021d09f9bb5d1ce712f55538fb4999c849f317ad38b762ec76d7c94b96c619c79befd8757e42f1f6c7b8150387d8b75c4e46d6531cec875aadf795a14c8985

  • SSDEEP

    3072:ghOZv02hPENY58jsSKMuejL6WYFVGdGJrZu79NjIUnd5u:dZvvMiaj5HjL6nFTJlqXjz

Score
10/10

Malware Config

Signatures

  • Cobalt Strike reflective loader 1 IoCs

    Detects the reflective loader used by Cobalt Strike.

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 27ad5f3f753b5d99e0f052b7a3f1a333_cobalt-strike_cobaltstrike_meterpreter_JC.exe
    .dll windows x86


    Headers

    Sections