Overview

overview

10

Static

static

10

f0287e33ca...0b.exe

windows7-x64

10

f0287e33ca...0b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f0287e33cad481e2e9f67e6953174fb3a0fff24ef1f160c016c8db008c89bc0b

  • Size

    61KB

  • MD5

    440f71d80eefe1a8eb0a82cf39b3f087

  • SHA1

    b7bde7f65a1bbd81fd7609a9def4dd16868b7678

  • SHA256

    f0287e33cad481e2e9f67e6953174fb3a0fff24ef1f160c016c8db008c89bc0b

  • SHA512

    ec081f99c9e18da3d057c0db3f2ba7d5c7a6c2b617e8044e9c80bfa58cd4db7d779e50658e56598ed8576ce1cb62010b869df368cb2ddf855b1600894622d67a

  • SSDEEP

    384:H+NM9YmeTGaCyymmnZAIsr0m5+URHqIvonIn5blJQfBXCTO9P89Z57:H+NMekfyytBsBlAI5blQByT8P89

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://47.115.231.65:1145/validate/tutorials/E7LFWG9H

Attributes
  • user_agent

    Accept: application/xhtml+xml, application/xml, application/json Accept-Language: ar-eg Accept-Encoding: gzip, br User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f0287e33cad481e2e9f67e6953174fb3a0fff24ef1f160c016c8db008c89bc0b
    .exe windows x64

    3c8a8398eee3b9b2d12a97f9d6a0965d


    Headers

    Imports

    Sections