Overview

overview

10

Static

static

10

318d806655...c0.exe

windows7-x64

1

318d806655...c0.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    318d806655976ac7b48975cdcb3bcb82bf3a7fcf92b5bdf3c521912a7e4a64c0

  • Size

    1.3MB

  • MD5

    4a63fac5b37180415f4751f571526a51

  • SHA1

    ef4c9280348dd0790b4b6b0e3fa81179ba04d001

  • SHA256

    318d806655976ac7b48975cdcb3bcb82bf3a7fcf92b5bdf3c521912a7e4a64c0

  • SHA512

    57a870683b1968674bc4c729f1d3acf743857f41578220e780a58c5bb1075afbc6ea6415c36c6b7b1a9e18b605d9c3a304f87ee1c3c53a69b74bf910884d463e

  • SSDEEP

    12288:zSxqaXPZDAe5+8OtvS5v0JtdhVav1chNb3TJRgAhAujiqdD1yf2ozKWLYE8g54yl:mxNlpIptvS5v01vgAhAuTD0ND1

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://59.110.219.204:9999/qAVU

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0; MASP)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 318d806655976ac7b48975cdcb3bcb82bf3a7fcf92b5bdf3c521912a7e4a64c0
    .exe windows x64

    c7269d59926fa4252270f407e4dab043


    Headers

    Imports

    Sections