General

  • Target

    9e84690faca31eae6efe82a0fd21bc41_cobalt-strike_cobaltstrike_meterpreter_JC.exe

  • Size

    234KB

  • MD5

    9e84690faca31eae6efe82a0fd21bc41

  • SHA1

    41a41b0214f237c856f80537a65126e2f4a0c3a4

  • SHA256

    a6085c012c63804312806270f6ab335443a3db39e848685c94f41e518011fcf4

  • SHA512

    e56321afa50a81c3fd367a974fd6d5cc79a56ff398a76898f08027d0a7e17dc51dbb6b56653a98c0c6a9b011218b06c808591cd32ecfb9f1f05992951bbd1285

  • SSDEEP

    3072:n3vli2EJv1RBuZH3JxgYhgipvLKoTte0SqoOCtA21/wlULGs7jnZdFjdUP5vkZD:n3vyJNRkZHBvZp0qoOCu2pkojnZHjT

Score
10/10

Malware Config

Signatures

  • Cobalt Strike reflective loader 1 IoCs

    Detects the reflective loader used by Cobalt Strike.

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9e84690faca31eae6efe82a0fd21bc41_cobalt-strike_cobaltstrike_meterpreter_JC.exe
    .dll windows x86

    8737e3b6db7ac37b7efe45e6204193ba


    Headers

    Imports

    Exports

    Sections