Overview

overview

10

Static

static

10

ab879f1479...83.dll

windows7-x64

10

ab879f1479...83.dll

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ab879f147981ac15cff29f9c8f803babd24fcbe0af35ff41506cac63568af683

  • Size

    12KB

  • MD5

    1a51a2e70bf4d5ea2d0cc63c699d02e4

  • SHA1

    7660b14ab75b8c001e8ea4552368f1cb2e4e2343

  • SHA256

    ab879f147981ac15cff29f9c8f803babd24fcbe0af35ff41506cac63568af683

  • SHA512

    47df2439bf8895afd0e174bba2e61a339dd8acaaa1571373218670e033f12d629d923ee8bddc1ce6cce17399b68ee156a77de99bb90a0db7750d7df1a14af490

  • SSDEEP

    192:v1ywrfiRD3UXIlsEAatUdSRdzHUPnXBdwdRdzHsDLMN/PeH:vliRQdEAat0SrITwdrDSrH

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://185.224.169.210:8087/rLKT

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; LBBROWSER)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ab879f147981ac15cff29f9c8f803babd24fcbe0af35ff41506cac63568af683
    .dll windows x64

    ab2255744670de1f29bbc0c2a953fc9f


    Headers

    Imports

    Exports

    Sections