General
-
Target
951433c37daf70078ac6c8cbf723d677_cobalt-strike_cobaltstrike_meterpreter_JC.exe
-
Size
206KB
-
MD5
951433c37daf70078ac6c8cbf723d677
-
SHA1
73e980f0e668e3438fea9010c230378a8a9b0f16
-
SHA256
3ce87dc979286d3e1ccb2ec0067b03c4fca6d10b3e036d4e1d9bb67eb9470f57
-
SHA512
af6b24f8031d8e41e6e9460e615ab9834f9d1ca4a1564694dbe3b615940a59ec2211177be2405a518bbc75e3825b2fdb4ee40250d2d0eac17c8621b3bb05831a
-
SSDEEP
3072:yGW5p3Xuu3+pdBM1PY8CqUZQFeiuXeNO5KSLAo0QljCa5jVUO5t:y9XuY+ow8C72uF1XljVj
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
Botnet
0
Attributes
-
watermark
0
Signatures
-
Cobalt Strike reflective loader 1 IoCs
Detects the reflective loader used by Cobalt Strike.
-
Cobaltstrike family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
951433c37daf70078ac6c8cbf723d677_cobalt-strike_cobaltstrike_meterpreter_JC.exe
Headers
Sections