General
-
Target
9dda346d21f34b3566b9e9b2a5e87dcf_cobalt-strike_cobaltstrike_meterpreter_JC.exe
-
Size
206KB
-
MD5
9dda346d21f34b3566b9e9b2a5e87dcf
-
SHA1
7b0f9938cb4d01569d35942c8d33d573430f34ea
-
SHA256
6b88c4efdcf433b96378b8f5b30c4319ae195ba910be5394e8fea42fb92b3804
-
SHA512
b3e6a675dfbdd63c5a2a6da4a3eed8a2caf320ff3a45805e03ccae91ce699728e1a051c39a62002fa6da2c114c81f95b2e934f615a11c35f6ad1b1810488a5c7
-
SSDEEP
3072:wgQDlbXuKx4B4/Dyb8C3clHE8cWRl0JUyoxpE1VjlUjt5v:wTXuW4y28C3yk81RSQxpEHjm
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
Botnet
0
Attributes
-
watermark
0
Signatures
-
Cobalt Strike reflective loader 1 IoCs
Detects the reflective loader used by Cobalt Strike.
-
Cobaltstrike family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
9dda346d21f34b3566b9e9b2a5e87dcf_cobalt-strike_cobaltstrike_meterpreter_JC.exe
Headers
Sections