Overview

overview

10

Static

static

10

754dc540ff...bb.exe

windows7-x64

1

754dc540ff...bb.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    754dc540ffb49e50b5cdc22481e3e80cfb282d7f1790352ee9d82ef3bb1236bb

  • Size

    1.3MB

  • MD5

    6e32894bf3e6dcc743b31d5213793104

  • SHA1

    4f295ab9456632055e2dc65319568c9b140d7ce2

  • SHA256

    754dc540ffb49e50b5cdc22481e3e80cfb282d7f1790352ee9d82ef3bb1236bb

  • SHA512

    24eefc285adf363543adfa5d844310dda796fabc4e771f9dfb55d01f10d5534e59244b2985ce949fa0d7eda959d2cba39b4bfc58b20f5bdb8580d96e7b36022a

  • SSDEEP

    12288:fqeUit5/ZHBY6+LjZUYDKce5raVL2ItzXZgUFBpbwSxJISUZVG2QRplh1ON:9tBZHBY6mjZXIurZgMBpCZVGjRpD1

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://39.105.223.243:6666/pH6o

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 754dc540ffb49e50b5cdc22481e3e80cfb282d7f1790352ee9d82ef3bb1236bb
    .exe windows x64

    9cbefe68f395e67356e2a5d8d1b285c0


    Headers

    Imports

    Sections