Overview

overview

10

Static

static

10

d0005bb2ac...77.dll

windows7-x64

1

d0005bb2ac...77.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d0005bb2ac6e1ffb28878e8ad3a3dc11d616eefba02bd9ebeb7f7fda0142b277

  • Size

    64KB

  • MD5

    00b893689d6c3e0b3f80b12f6d77adfe

  • SHA1

    af66c5b8bc823513b1bbf8e25161af1ccec29e8a

  • SHA256

    d0005bb2ac6e1ffb28878e8ad3a3dc11d616eefba02bd9ebeb7f7fda0142b277

  • SHA512

    addacf25dc5f65f6cfdf899d0480e77afb5b0c59dec3c8716548234b1811a6e2b447e913bb9b7e79f39dc92606717045dc5592b0c62c0c7e09284aed0a64dbf6

  • SSDEEP

    384:TVgvAaXLytyZmMUFV8dTveojbqouNI3J4VcRgZInZH8uSQfBvD/Foc4PAlv:pEbHne0bqO3TSWn98uTB7/ec4PA

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.2.138:4444/Gl2x

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; MALC)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d0005bb2ac6e1ffb28878e8ad3a3dc11d616eefba02bd9ebeb7f7fda0142b277
    .dll windows x64

    e381e4ed768d4b967f391687afa45e0f


    Headers

    Imports

    Exports

    Sections