Overview

overview

10

Static

static

10

3426daf171...b6.exe

windows7-x64

1

3426daf171...b6.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    3426daf171e4e740aa926dc41e4ff01abe7a6dfe2fbbb81cb6274db68de0d0b6

  • Size

    1.2MB

  • MD5

    348ca773e0a8e583d975df35e526c8d9

  • SHA1

    fd031ee20c5dab21bdfe3040e12cde6141434bdd

  • SHA256

    3426daf171e4e740aa926dc41e4ff01abe7a6dfe2fbbb81cb6274db68de0d0b6

  • SHA512

    dbab215aea654404400eb816f0a5ed47f8e64fa151c7c34084daf019896f1242907ab106636b1709ac5abdd97854cff7a4bf3cb000ac5f61d5b530f1518c9a12

  • SSDEEP

    12288:3IHnT+L+HuqvqORhCMREq5HTjjnrKAIpKfT6gOEWWF1LY24fpfUsflh1z:mKw1vqORhCMjTrfT6gOEWWyf3fD1

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://112.126.73.8:38080/Blv9

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; BOIE9;SVSE)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3426daf171e4e740aa926dc41e4ff01abe7a6dfe2fbbb81cb6274db68de0d0b6
    .exe windows x64

    9cbefe68f395e67356e2a5d8d1b285c0


    Headers

    Imports

    Sections