General
-
Target
9d99c52483aa9d6953f97cc6479bc363_cobalt-strike_cobaltstrike_meterpreter_JC.exe
-
Size
234KB
-
MD5
9d99c52483aa9d6953f97cc6479bc363
-
SHA1
567e91e3d41e36f78bbce6f0fa60e072518b26be
-
SHA256
a7e7ff20f7e40a4f3de268684d4f427488b088f85c50f5d84a7db07097abea98
-
SHA512
0332557e4c873d84017c242e7d5b11f4b4452096018f83e4ed379a1e0e060babd267894394aa349cd935e48370b0f7eb2ffb50074d62d3407ac8b77a47a6ac38
-
SSDEEP
3072:kEgRLoFPaa+aZHVftT5fC4MtkSHy0pD/hh0UZbaLuNBR05BATwtjFURE5P:kEgsPt+aZH9DMSr0pbhyUBaLkKBATsj
Score
10/10
Malware Config
Signatures
-
Cobalt Strike reflective loader 1 IoCs
Detects the reflective loader used by Cobalt Strike.
-
Cobaltstrike family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
9d99c52483aa9d6953f97cc6479bc363_cobalt-strike_cobaltstrike_meterpreter_JC.exe
Headers
Sections