Overview

overview

10

Static

static

10

297f7d73c3...34.exe

windows7-x64

10

297f7d73c3...34.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    297f7d73c37a694aa0b00dd2790aa52a3f402e5aa72971b704570dfe0eae6834

  • Size

    40KB

  • MD5

    852182acdf418acad05377717ea255b4

  • SHA1

    9182943f2945dd4f7b5805373ad8892caa519b16

  • SHA256

    297f7d73c37a694aa0b00dd2790aa52a3f402e5aa72971b704570dfe0eae6834

  • SHA512

    0ae7c007b7d25574519f8471a6b27c74acee731038df0deac3755ef7033899350df244aeefeebd7fe28a444e3011ba053e2073829f917e169c0b63f055dcb87a

  • SSDEEP

    384:M9/WmyPKaQ5F2EiYQQGZEA3AdmW4P5ILkwPhwzJAByD2CkB:M9/nyKL2EiYQQoS0RIL9hlByDZc

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://112.111.242.225:3000/8ljO

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 297f7d73c37a694aa0b00dd2790aa52a3f402e5aa72971b704570dfe0eae6834
    .exe windows x86

    c08a6428a29fee463a16f5ffddd3955f


    Headers

    Imports

    Sections