Overview

overview

10

Static

static

10

b8dd943c15...10.exe

windows7-x64

10

b8dd943c15...10.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b8dd943c15381a5707157beae232d516cb03a398896445442bf1a5bb8c08e510

  • Size

    62KB

  • MD5

    db361f2232af5d05630a2231289f2e45

  • SHA1

    a2f7dc12f25cdd70136cf6105970e85f84e3c2ad

  • SHA256

    b8dd943c15381a5707157beae232d516cb03a398896445442bf1a5bb8c08e510

  • SHA512

    48f7eeb20ce2d879054010debcdfd8fc37804ab30469d223f415346deac652a3d1efeb0f76be1a67e1f215c82f391a3d1248267e97ca23bfcc7073876168a978

  • SSDEEP

    768:KuR0bfdyuU2wb5x0anFRxBHxPaVzhvAy9/:3cfBHwbQanFfBhaHB

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://175.178.0.88:9999/9zw3

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; NP07; NP07)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b8dd943c15381a5707157beae232d516cb03a398896445442bf1a5bb8c08e510
    .exe windows x64

    523de4af751183df764cac50c6c96e6f


    Headers

    Imports

    Sections