Overview

overview

10

Static

static

10

0f6a966b52...97.exe

windows7-x64

10

0f6a966b52...97.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0f6a966b5244330ca343d5538944c6794bd6e9eb234ad99955fce54dc470c397

  • Size

    62KB

  • MD5

    f5cfb01301243cf5f2edf2b4b088a75e

  • SHA1

    91b3efe0f31ca0abb732878985b96322bf02d68e

  • SHA256

    0f6a966b5244330ca343d5538944c6794bd6e9eb234ad99955fce54dc470c397

  • SHA512

    88978f1a10f6d4b01165f1ef424a233b129bb5f0bf8091e6ae5bcdad2e18cfee22535337d352661e585efe1fc685bc131ed5d30c8d0d79d0b2f497fe3c1b9c4f

  • SSDEEP

    768:dcR0bfdyuU2wb5x0anFRxB/WPaVzhvAy9/:6cfBHwbQanFfBkaHB

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://175.178.0.88:9999/9zw3

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; NP07; NP07)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0f6a966b5244330ca343d5538944c6794bd6e9eb234ad99955fce54dc470c397
    .exe windows x64

    523de4af751183df764cac50c6c96e6f


    Headers

    Imports

    Sections