Overview

overview

10

Static

static

10

31b42f4c75...1d.exe

windows7-x64

10

31b42f4c75...1d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    31b42f4c75ebf00a968b9e3138286fc0a052e3ac78ab8f0c7818dced4916981d

  • Size

    323KB

  • MD5

    1cc7420236568da2ce94ba0889e5e7b3

  • SHA1

    b4023e6edfe9c2ba776676c2496da91becc9a7db

  • SHA256

    31b42f4c75ebf00a968b9e3138286fc0a052e3ac78ab8f0c7818dced4916981d

  • SHA512

    9d01239f5656b1035ede82aa81a70c8cd3af5e2d8c22a3ac3efa4a13583feaea3fcd75f350a476671b662205ea7bd83e8ee0556869aec38799b2d19f9e960725

  • SSDEEP

    6144:jIza7ALCvWwG9iAPiS7BhRC0hla6udRWiym5iaRF6Qva8cTOo7Hb:jI+69s6F7XY0upGWgoFtvXMHb

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://service-le5zucun-1318291189.bj.apigw.tencentcs.com:443/ppxiJttj

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4472.114 Safari/537.36

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 31b42f4c75ebf00a968b9e3138286fc0a052e3ac78ab8f0c7818dced4916981d
    .exe windows x64

    dffc733bd2c697b7071c344d16ebbbb9


    Headers

    Imports

    Sections