General
-
Target
5fb4ce7f539f627225dbe3764806c238_cobalt-strike_cobaltstrike_meterpreter_JC.exe
-
Size
206KB
-
MD5
5fb4ce7f539f627225dbe3764806c238
-
SHA1
3be423b64c1f2b35f8eea60a74a6c151396b1c20
-
SHA256
7ee5befe10aa887e0f2b1fdf7813f7bfeabd9bb1459dc39d307ff0f3f69986e6
-
SHA512
37a291d054037056faf8b4953311231891423bce87747e8bdfd80369587b343847477965c3701e9566faafbf0c390ae3aba1c7c706b31c42b172fe0e75513e7c
-
SSDEEP
3072:M8f7OxJXug0tneIPZ8CjJsyTtDWwz2cSx6DWmtjdU/Sz5y:ZQXuht1h8Cj1JDhzTDW+j
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
Botnet
0
Attributes
-
watermark
0
Signatures
-
Cobalt Strike reflective loader 1 IoCs
Detects the reflective loader used by Cobalt Strike.
-
Cobaltstrike family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
5fb4ce7f539f627225dbe3764806c238_cobalt-strike_cobaltstrike_meterpreter_JC.exe
Headers
Sections