Overview

overview

10

Static

static

10

6dee1a035d...27.exe

windows7-x64

1

6dee1a035d...27.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6dee1a035d1f47871c39c1240c07c7c6389ae36ca2b4e6b36bde03d8a42f3327

  • Size

    1.2MB

  • MD5

    299043f781c4afb1132ba63db23c90fc

  • SHA1

    8ddbe88e779898f5454faf5a81e123e5b14e21bb

  • SHA256

    6dee1a035d1f47871c39c1240c07c7c6389ae36ca2b4e6b36bde03d8a42f3327

  • SHA512

    09a4d2ce37e9abab245012b26134cbed608e0995d4452b5d0a9aa9a55091021be3e38ca0a1daf087ec795ac54fe43808c5b6809e6f2a9ea2b74e85db2c1461d3

  • SSDEEP

    12288:oIH3M+L+Huq/AOR3iMfOa5HTjjnMKKIpKfT6gOEWWF1LY24fjSWO8lh1z:RBw1/AOR3iMrTYfT6gOEWWyfQ8D1

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://124.222.129.148:1111/KMda

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0; BOIE9;ENUS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6dee1a035d1f47871c39c1240c07c7c6389ae36ca2b4e6b36bde03d8a42f3327
    .exe windows x64

    9cbefe68f395e67356e2a5d8d1b285c0


    Headers

    Imports

    Sections