Overview

overview

10

Static

static

10

6071513c3c...dc.exe

windows7-x64

10

6071513c3c...dc.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6071513c3c82264cb98c92f6e8a019034756936cacd145dbcd244a366d22c6dc

  • Size

    61KB

  • MD5

    4dd64170f33ef0ef4b75fd1113b5ffc5

  • SHA1

    bbf264a46af966984e78e3ed0c95ec7e74b6dbc2

  • SHA256

    6071513c3c82264cb98c92f6e8a019034756936cacd145dbcd244a366d22c6dc

  • SHA512

    0c0f3901f5002320382b464858ec13598172b64cdeb241cf5b48bbd347e45640ae7c4231c2719a648cc88802008742512a5590313abab32798ff0dc8c7b1057d

  • SSDEEP

    384:HeNM9YmeTGaCyymmnZAIsr0m5+URHqIvonIn5blJQfBXATO9P89Z57:HeNMekfyytBsBlAI5blQBQT8P89

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://47.115.231.65:1145/validate/tutorials/E7LFWG9H

Attributes
  • user_agent

    Accept: application/xhtml+xml, application/xml, application/json Accept-Language: ar-eg Accept-Encoding: gzip, br User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6071513c3c82264cb98c92f6e8a019034756936cacd145dbcd244a366d22c6dc
    .exe windows x64

    3c8a8398eee3b9b2d12a97f9d6a0965d


    Headers

    Imports

    Sections