Overview

overview

10

Static

static

10

9f7974e714...48.exe

windows7-x64

10

9f7974e714...48.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9f7974e7148aeb40ba22e58ee6c4e492f425c11f3b6b0b059fd29be9e47d5c48

  • Size

    61KB

  • MD5

    31a95dbed3f48f2bfb650e850d1c9517

  • SHA1

    2e8d3ef1f028c5eef843c1cbf1eda308610be3c4

  • SHA256

    9f7974e7148aeb40ba22e58ee6c4e492f425c11f3b6b0b059fd29be9e47d5c48

  • SHA512

    acf2f6db684c7b3b116be2218f9cdf9e25b63629841606eadbcadb6e6b5b5e8e9a15e03d3886d5effb5c9247d2f6e368edfdbdb944c85d09bf60e83827258af5

  • SSDEEP

    384:4RCLay2k2S47fxvdeTtR9y9H/ci8zIP6T45/y1gCHKZNGQfB5MUR+A89XnO:ehy2EE6ry9kMLs19KZZB3+A89

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.100.100:80/3Mex

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9f7974e7148aeb40ba22e58ee6c4e492f425c11f3b6b0b059fd29be9e47d5c48
    .exe windows x64

    045dd86b48d72800d5e8a1d5b2d9c4e0


    Headers

    Imports

    Sections