General
-
Target
5f363c5d5dd89cb6ef288e4386c6e0e9_cobalt-strike_cobaltstrike_meterpreter_JC.exe
-
Size
234KB
-
MD5
5f363c5d5dd89cb6ef288e4386c6e0e9
-
SHA1
21bbb9c02ed0880a819ccffba886ba67468d42bd
-
SHA256
dd1b91522f333fec5b2b3a762dc8bbca6a619db6a453e41c490025131c28a2f4
-
SHA512
ec49111a66b066f28a1f5d046cde48f076a1a0e454d97439eff1cc6e3bf8b82415550273796ce8e1ccfa3117c6299e6bc3292e02789e49b3f818b4b21d89425b
-
SSDEEP
3072:64UpHwBHOOSCZH9dFd9jy8wrhYyjq0VXlZkshgpMhxF0pR0DE1jVUo5v:64U8HNSCZHVrwOP0VXlKsakCR0DYj
Score
10/10
Malware Config
Signatures
-
Cobalt Strike reflective loader 1 IoCs
Detects the reflective loader used by Cobalt Strike.
-
Cobaltstrike family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
5f363c5d5dd89cb6ef288e4386c6e0e9_cobalt-strike_cobaltstrike_meterpreter_JC.exe
Headers
Sections