General

  • Target

    988d0cc73590a0768199453bb1aa0728_cobalt-strike_cobaltstrike_meterpreter_JC.exe

  • Size

    234KB

  • MD5

    988d0cc73590a0768199453bb1aa0728

  • SHA1

    1fb81aa3113e369e4e9e53ef17bf504ff000cf19

  • SHA256

    662e7736f814ec4783b876370874560c86ad6a6deb78f6cd7b8a93eaa8c2ead4

  • SHA512

    18896bc365409ae312f5b6466cce5403a6648fc85bd046df2ea516e088fa4c0c5422f1378574174644393773fd7e53c0a5cfab5424276e263687a2a31ca2ed52

  • SSDEEP

    3072:eFN9waSnxcCnHIZHhrpRsNcKWv1sK7m2Wq+YQhs2Flgez4YbDNFVpjFUG5T:eFNKxc0HIZHiQ1lCq+YQm2zEoDNFTj

Score
10/10

Malware Config

Signatures

  • Cobalt Strike reflective loader 1 IoCs

    Detects the reflective loader used by Cobalt Strike.

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 988d0cc73590a0768199453bb1aa0728_cobalt-strike_cobaltstrike_meterpreter_JC.exe
    .dll windows x86


    Headers

    Sections