General

  • Target

    2b46bb30be7b3424f6218da80490f9fc2dc9cc95eab823a63dbf7b4ae430a14e

  • Size

    61KB

  • MD5

    c869651514edb5a6d7fa1abc286a00ae

  • SHA1

    af7b600c51d33b4ce1b69e4be77f11b8c65236a5

  • SHA256

    2b46bb30be7b3424f6218da80490f9fc2dc9cc95eab823a63dbf7b4ae430a14e

  • SHA512

    1a2c292d0628f9ae7a452e3d19d49287f50a17148352114a3c345d03e08bc3e85337b558dabfabb7205ef6f153ebdd91021216a0d1c513ad1027e78ac3a5146e

  • SSDEEP

    768:r/4haZMTinym159xs0U1H3M65qsBb8xNA89:jpMWj79xh85qsBIxN

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://175.178.0.88:9999/9zw3

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; NP07; NP07)

Signatures

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2b46bb30be7b3424f6218da80490f9fc2dc9cc95eab823a63dbf7b4ae430a14e
    .exe windows x64

    dc5a1a4930315fa9227f7de81fbf078b


    Headers

    Imports

    Sections