Overview

overview

10

Static

static

10

a35c027f56...78.exe

windows7-x64

10

a35c027f56...78.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a35c027f56b4042809eeffaf872a4aabb4ee9abe2328d80374901c19e3bffc78

  • Size

    61KB

  • MD5

    8916cc5ed8b67573688404a50cad8c2b

  • SHA1

    258034d7c41d01339b822f127a85ec295636941e

  • SHA256

    a35c027f56b4042809eeffaf872a4aabb4ee9abe2328d80374901c19e3bffc78

  • SHA512

    2ff694dd5ada3f7664f9f2773f935613e8728f974ef6c5b5d5a9840faf6cc276b261555d7c2654b6cd7e290fd0457c949bd74f8814e76b00391bd65322cf0d3a

  • SSDEEP

    384:QRbLmU6a/UIe5JQW3CeTHh0MycHDY68jIv6BUwaKv4zHveJ9GQfB59i/dbdcmA8M:QR/mG/DWJhDycYEvwzvI2JJBPiZA89

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.100.100:80/3Mex

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a35c027f56b4042809eeffaf872a4aabb4ee9abe2328d80374901c19e3bffc78
    .exe windows x64

    ff8fa9efca351188955744879664127e


    Headers

    Imports

    Sections