Overview

overview

10

Static

static

10

f786365199...b7.exe

windows7-x64

1

f786365199...b7.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    f786365199aa89e706764daea6d3d92249800b0f0d68c74a40109404eec581b7

  • Size

    1.2MB

  • MD5

    12a7d8cac1f966a8e953b387223d2db2

  • SHA1

    cd5b4296ac5eed933b60ca8f2f9665b318d1b9d3

  • SHA256

    f786365199aa89e706764daea6d3d92249800b0f0d68c74a40109404eec581b7

  • SHA512

    74088f566d57069c327972d7643fd591e8e6b27deffc5e18556ab9d571e9e1a8f7807d28d842ee5379abc235461e469cd0adc72ee08e2601f8ef85795bc084ea

  • SSDEEP

    12288:TWPHymKTq6LBCbWkVcCvN507bjnLKEIpKfTbgaEKWF1wY24fjdqzRlh1r:TWvMDB0WkVy77fTbgaEKW/fjGRD1

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://106.14.141.209:8087/hkDF

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f786365199aa89e706764daea6d3d92249800b0f0d68c74a40109404eec581b7
    .exe windows x64

    9cbefe68f395e67356e2a5d8d1b285c0


    Headers

    Imports

    Sections