Overview

overview

10

Static

static

10

7d28aba7c9...84.exe

windows7-x64

1

7d28aba7c9...84.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7d28aba7c9dffcc649889f1ba9649e92b792c1709c5baa1a7b934cd3e8009184

  • Size

    1.2MB

  • MD5

    a85940a91b4400c8081eaa82d96b8aa9

  • SHA1

    b7026ab8dd0d33d2eff2105bd98e213b44adb299

  • SHA256

    7d28aba7c9dffcc649889f1ba9649e92b792c1709c5baa1a7b934cd3e8009184

  • SHA512

    5c42760fc1db33508e9b787e576afc505d7f335d524276fbbf00be3f9e203a9ac35a87d1538a0823bbd2d56b40681920921eef197cf7209d3909b6bd9bb89906

  • SSDEEP

    12288:FbhvGW2Zi287Oq2nRJrcUFrpWnY/zoOYp1mRX3xUDoooRLda6dua79OxyVt2mnn/://R7OqARaYcOYp1mRXhUrzacxc4m1Hb

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://206.119.171.91:80/Epo9

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Firefox/24.0

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7d28aba7c9dffcc649889f1ba9649e92b792c1709c5baa1a7b934cd3e8009184
    .exe windows x64

    4f2f006e2ecf7172ad368f8289dc96c1


    Headers

    Imports

    Sections