Overview

overview

10

Static

static

10

46f2dfb42f...71.exe

windows7-x64

10

46f2dfb42f...71.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    46f2dfb42f25cc96d01e123f9ddc1ae43187bab325cdec59600db7cb0cdb6f71

  • Size

    932KB

  • MD5

    828775316039f20f66f2cb2d156f2b07

  • SHA1

    3ea10b73e320795003a60c6cedaef9ffee19f4e2

  • SHA256

    46f2dfb42f25cc96d01e123f9ddc1ae43187bab325cdec59600db7cb0cdb6f71

  • SHA512

    b9231b547074e67d6a14323fe75ff4ea392167a4ad84a28515a32858060da3f6ff12c9554e0d98725f91d56a00c32a0a2a0fef3bbd6c65b47fa2a817220fbc6f

  • SSDEEP

    12288:EYrQE7qBrobbkF16DhX7H8N3HbD32dLza4p9by13yOYgllqm4oHUtZq:Nrv+BrYbI6ZH8tWgyOYgl0Z

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://cloud.microsoftupdate.services:443/Create/v1.98/CCA0PVXVS07R

Attributes
  • user_agent

    Accept: application/xhtml+xml, text/html, image/* Accept-Language: ku Accept-Encoding: identity, * User-Agent: Microsoft-CryptoAPI/10.0

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 46f2dfb42f25cc96d01e123f9ddc1ae43187bab325cdec59600db7cb0cdb6f71
    .exe windows x64

    2291e72ea6f877aaaa4bb671818d3183


    Headers

    Imports

    Exports

    Sections