General

  • Target

    7a33470bb173ab7541d14d1ace36d91abdbf13fdb58c1359e1191b319418e573

  • Size

    382KB

  • MD5

    123db5ec8249fa3d4e6e58b568b834b2

  • SHA1

    f6c91c45cc7ab8887bbdae2954e2cea628a3d209

  • SHA256

    7a33470bb173ab7541d14d1ace36d91abdbf13fdb58c1359e1191b319418e573

  • SHA512

    8542688e541e9757338b77ffc9840f72175e2bb961b1f5fccd72fc68a14caea5ec13949876a7692bef64702cfecb81aea44aa3a5f4d2fafdc5ffa19c7809bdc1

  • SSDEEP

    6144:0hRRwhC33JPbbyUNeDZiXh4YOgqhzKeC3mYXxNUMv:0hRRdgUNeDZiXh43tCxX

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://103.146.179.77:6666/xzzzz

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0)

Signatures

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7a33470bb173ab7541d14d1ace36d91abdbf13fdb58c1359e1191b319418e573
    .exe windows x64

    297c23bd5ccaee327d1e0e18b4d3700a


    Headers

    Imports

    Sections