Overview

overview

10

Static

static

10

2246b5af1a...a2.exe

windows7-x64

1

2246b5af1a...a2.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2246b5af1a8660ba097f216588b7f50bffe3787ac7b5e369441ffcebbc7f50a2

  • Size

    44KB

  • MD5

    be452a892cccf331608f8f3717fdb1df

  • SHA1

    00183ea2d801389abcb2b5594435ca049a58562e

  • SHA256

    2246b5af1a8660ba097f216588b7f50bffe3787ac7b5e369441ffcebbc7f50a2

  • SHA512

    d5cb8951e6be4bde316890fcf0b769837bf5c1ed7deedd76234118612d8d679bbae3c28e2f6efe3c29918435631f1d3a1b21e6e4ceaa7d9c87d2d20ec29fdd94

  • SSDEEP

    384:WZsNxosYjeC+5pahcZnTVefKi4jpdJ7FDBp5wPhk7BWD215xN:WZcYK3aKZTwixVv7FtpwhsBWDEN

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://172.16.1.210:8090/jquery-3.3.2.slim.min.js

Attributes
  • user_agent

    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2246b5af1a8660ba097f216588b7f50bffe3787ac7b5e369441ffcebbc7f50a2
    .exe windows x86

    02210cdd16a2c3c05a681a981a3673b6


    Headers

    Imports

    Sections