Overview

overview

10

Static

static

10

e4c57053dc...d8.exe

windows7-x64

10

e4c57053dc...d8.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e4c57053dcd73e211c97635cb6f55487121b2232c468b49b46da97ed7ea00bd8

  • Size

    62KB

  • MD5

    9960cc4ffb0d62b1c91173474dea28d4

  • SHA1

    0f6cf82a67e9a334cccc342d08745623436f5338

  • SHA256

    e4c57053dcd73e211c97635cb6f55487121b2232c468b49b46da97ed7ea00bd8

  • SHA512

    500eac4271953ded93a228e443a51adcc20ac222eaf1bffa76cfe3755d7c883060e1d829cdb63fe8a693c294a64b3dedd119082422ad8c033444488be2c3cb27

  • SSDEEP

    384:BhviqaCQM8yqGWshWlqTOFRDebCqRC4eHJIhCzErvCqYyH/XBbIWQfB4AEb+yuQJ:BheCnR0FobCqRN9rzRfBbSBNEb+/QA8

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.7.130:6777/SiTM

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; yie9)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e4c57053dcd73e211c97635cb6f55487121b2232c468b49b46da97ed7ea00bd8
    .exe windows x64

    3ba088b8e001c3e64552aa2612eda020


    Headers

    Imports

    Sections