Overview

overview

10

Static

static

10

7f96cb964a...33.exe

windows7-x64

10

7f96cb964a...33.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7f96cb964aa1f8679f7e09d2b632aeaabcd07f55f7a1318b3efaf3c891d09d33

  • Size

    323KB

  • MD5

    51b1413beb8ecf728fec2ab2ff5b752c

  • SHA1

    74b92638a3a69e0d69ebd5b929d76572450e93dd

  • SHA256

    7f96cb964aa1f8679f7e09d2b632aeaabcd07f55f7a1318b3efaf3c891d09d33

  • SHA512

    f0a75f0add806d66d96d80ded0f2141780e4b50df9deb59bca1a026317111a63e08094384e8799dd4a0ef1a33a13c62c9ee324c3048127398751f5880ff65aaf

  • SSDEEP

    6144:/ZEza7ALSvWwGKiAPiS7BhRC06laSudWWirm9iatFnQva8iTRoMIb:BE+K996F7XY0dBj9UUFQvXWIb

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://service-le5zucun-1318291189.bj.apigw.tencentcs.com:443/ppxiJttj

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4472.114 Safari/537.36

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7f96cb964aa1f8679f7e09d2b632aeaabcd07f55f7a1318b3efaf3c891d09d33
    .exe windows x64

    dffc733bd2c697b7071c344d16ebbbb9


    Headers

    Imports

    Sections