Overview

overview

10

Static

static

10

5974f8f0c0...f2.exe

windows7-x64

10

5974f8f0c0...f2.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5974f8f0c05eb6b098df401e4db7c6664e96b7842b5fba2d150b1269ffdd90f2

  • Size

    323KB

  • MD5

    9343939931baebeba2ce4faae5ff75ac

  • SHA1

    46426e988500e03d42a6123da4d97800171d5d6d

  • SHA256

    5974f8f0c05eb6b098df401e4db7c6664e96b7842b5fba2d150b1269ffdd90f2

  • SHA512

    c57ef9f61d497e5e57dc9aea650c722449e976bf77cc07b4a30c75ecccfe12a18dac4dfc7938098cfb5e678f47718b37ad23c6a75aaba34351deaad001db5562

  • SSDEEP

    6144:WGza7ALXvWwGLiAP6S7BhVC0kYauudjWitmBialFaQva8aTi4KI:WG+r9G6d7Xs0stkPIUFNvXxI

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://3.25.114.23:9001/cRUS

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; MDDCJS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5974f8f0c05eb6b098df401e4db7c6664e96b7842b5fba2d150b1269ffdd90f2
    .exe windows x64

    aedeace88c22991329d77b4400b84512


    Headers

    Imports

    Sections