Overview

overview

10

Static

static

10

befc458c18...a4.exe

windows7-x64

1

befc458c18...a4.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    befc458c1846fc218ebc30ee87fa4868592ce79ea582bbc47a8745a5ee2523a4

  • Size

    1.4MB

  • MD5

    447e36ab1302706c00b152be53b2ed82

  • SHA1

    b5db68c6dc137461fc4e941431365f27b60cad83

  • SHA256

    befc458c1846fc218ebc30ee87fa4868592ce79ea582bbc47a8745a5ee2523a4

  • SHA512

    4f2178d289b63a0a18d7289cac9cf33ab6d62fc4f28aca7600e9a53e1cedd82013fcfff5923d5634cbf8919a791dc221a9aa372906d6c01ec55d30c63822f4b2

  • SSDEEP

    24576:aUZTFbyWKjsK39lnNRl5bQ/X/JK3SgOVlxSteBv9Qz1:aqFbyWKP39FNU8SgOzxSS9Qz1

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://206.119.171.91:80/nfT5

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; BOIE9;ENUS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • befc458c1846fc218ebc30ee87fa4868592ce79ea582bbc47a8745a5ee2523a4
    .exe windows x64

    f0ea7b7844bbc5bfa9bb32efdcea957c


    Headers

    Imports

    Sections