Overview

overview

10

Static

static

10

25c4c44a76...95.exe

windows7-x64

10

25c4c44a76...95.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    25c4c44a76b31e06d2f3782ced980d34db110b707545020e5d2d2ddeb79e5795

  • Size

    46KB

  • MD5

    e70c389132a1b94c45c328e987e837c0

  • SHA1

    42377fe644e2b0de6aafd8530ec3f9f147c422f5

  • SHA256

    25c4c44a76b31e06d2f3782ced980d34db110b707545020e5d2d2ddeb79e5795

  • SHA512

    16de90b9bc679a174ee42af7207e29de5ef64042bd9b28e0292e0704352d34276b00dfa720614685f0aec57489f55b299810956fface5a0b95b5e583207e8f37

  • SSDEEP

    384:6JaCZvKwcH53UaR0PbN5nwHxDQZtNcwPhosZBWqYZ+2TN:MaIvKwcqaR0Pb7wRitN1hpZBWRH

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://103.74.192.114:48736/jquery-3.3.2.slim.min.js

Attributes
  • user_agent

    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 25c4c44a76b31e06d2f3782ced980d34db110b707545020e5d2d2ddeb79e5795
    .exe windows x86

    1c2445a202265364672bed740552c598


    Headers

    Imports

    Sections