Overview

overview

10

Static

static

10

9a9a548607...65.exe

windows7-x64

1

9a9a548607...65.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    9a9a5486073eecb2f8a79cd5ed1d77642eb6f01675f8eb56738b4dcc7510a165

  • Size

    1.9MB

  • MD5

    a3f15e6ac6dc253cc8ea8ae7983043f5

  • SHA1

    4b1e25991eb5debddc18ed53b9d960acaec80c20

  • SHA256

    9a9a5486073eecb2f8a79cd5ed1d77642eb6f01675f8eb56738b4dcc7510a165

  • SHA512

    1e49186a5a4ea328dc61bba80dea7176f5a0b64485a0fb44668b9bca38909d81ae030b454af35bc02c8c107ba62a06ef1e2baa8b18b70a056b201958f78bb7f0

  • SSDEEP

    24576:hAtzZikiKh1L0sVtU1GtugKq2hYC4D1Z9WW2UT2/kBAjvK:hIzZi521ztUCugK/hYC4D1Z92U+kBAT

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://104.168.68.177:876/ktH6

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MANM)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9a9a5486073eecb2f8a79cd5ed1d77642eb6f01675f8eb56738b4dcc7510a165
    .exe windows x64

    f0ea7b7844bbc5bfa9bb32efdcea957c


    Headers

    Imports

    Sections