Overview

overview

10

Static

static

10

4a9886c930...a2.exe

windows7-x64

1

4a9886c930...a2.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4a9886c9301635598d26283279b66dcfa991b4083a78c779bc8d891b489e47a2

  • Size

    260KB

  • MD5

    efc95d5d7ed3f07661da17294e38bf49

  • SHA1

    a994a07cf052e216bd933835a35e11e1a45c909d

  • SHA256

    4a9886c9301635598d26283279b66dcfa991b4083a78c779bc8d891b489e47a2

  • SHA512

    74e126d7372a6a9d3869018577f7dcc5881d280a59f16b91b666d9495b63189f38a9673d2c6b353b20f22eb4217486244103e3736afa61330ec96e833c36473c

  • SSDEEP

    6144:/9ZFhdd/dxwcCqyi9HGfP10KFnw36J2+dBN3:/xxscvUacnD

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://39.105.216.244:43210/uUPC

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; BOIE9;ENCA)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4a9886c9301635598d26283279b66dcfa991b4083a78c779bc8d891b489e47a2
    .exe windows x64

    e022a12cdd5ebdd378b3c810f931f401


    Headers

    Imports

    Sections