Overview

overview

10

Static

static

10

69215d2c11...10.exe

windows7-x64

10

69215d2c11...10.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    69215d2c119a01e2f2339636fdab7ab9e5b503e4704525bdce2a2573674b7710

  • Size

    126KB

  • MD5

    60c412a20f60b4be5b8116f81a0f65ff

  • SHA1

    fadece6325dc90aab19de8fadcd3863d429be376

  • SHA256

    69215d2c119a01e2f2339636fdab7ab9e5b503e4704525bdce2a2573674b7710

  • SHA512

    e94d85c1bda7ac62ce5d1d74f652ecf7ca9c0cdf4e3ce5189d1bd655454da9a512798c72660540e3b97b7aa0fad4e3cf4f9ef017364c6997e82c8458bbaaf676

  • SSDEEP

    1536:sq7yHUNVwiP9tkDcV/btZCvY5ZSG0sladM2qODSsWxd7B9dlAF8uu6Plo:sq7yR+S2/bivI30sladR5wVGF8

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.16.100:9000/VyCK

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; NP06)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 69215d2c119a01e2f2339636fdab7ab9e5b503e4704525bdce2a2573674b7710
    .exe windows x64

    a028f310aaebd54cd246c824381bb4b1


    Headers

    Imports

    Sections