General

  • Target

    9567c47ffc6197115c7d05cccf40c70fb6a82373bfe7cc3bbedf84252135b72d

  • Size

    69KB

  • MD5

    f9ea04e023abc7465b87009b8523d6e4

  • SHA1

    329bb46d258fcdb4a0dc02f14b6e5afc120b890d

  • SHA256

    9567c47ffc6197115c7d05cccf40c70fb6a82373bfe7cc3bbedf84252135b72d

  • SHA512

    aa954de68cebb07650d663ba2bfa06fc5d5fbc27bbaf299e21fa99f5d6df9977b408ee886fc742e901b8ad4ba782372b16a0124314f73d26746ea3ea12a45eb7

  • SSDEEP

    384:lXy0apZeeSW+onrbrsT+3nb9jQrkIubuzkjL1o/+3fHsHLQfBET1grxUKj47aav:t+pQ+93b9cnuXa+3P4iBUedUKya

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.2.138:4444/Gl2x

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; MALC)

Signatures

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9567c47ffc6197115c7d05cccf40c70fb6a82373bfe7cc3bbedf84252135b72d
    .dll windows x64

    37143dac8eb9915ced24c5f19980c1cb


    Headers

    Imports

    Exports

    Sections