Overview

overview

10

Static

static

10

1ebf6d43e7...c0.exe

windows7-x64

10

1ebf6d43e7...c0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1ebf6d43e7a70c6520e93586401cce5474279ba27487310e34267e4d5372b9c0

  • Size

    61KB

  • MD5

    6c9f082e139112e15cf05baf7f1d9f96

  • SHA1

    c27c5ab130ab3848d5c1d93bb6ffe4aecf3d730f

  • SHA256

    1ebf6d43e7a70c6520e93586401cce5474279ba27487310e34267e4d5372b9c0

  • SHA512

    c6f52081f5a3b41c740e0302fe2049206c1ea3043eb358c1b0609843b71fd3220852bf325c1a45ca1e4cd6b0b6803da252baa44975f63d09c4a453f14eea2191

  • SSDEEP

    384:e1EhXheTZ+eyh3Q0TNIDs1xxVlhHAvoyzUetN2bnHW5QfBXN0lrY+P89Z7L:R2jyhArDS2dzXtsHWgB2Y+P89

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.106.128:80/GLuU

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; BOIE9;ENUS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1ebf6d43e7a70c6520e93586401cce5474279ba27487310e34267e4d5372b9c0
    .exe windows x64

    9bb87f18cfa5c3d6f1018b8724bf17e4


    Headers

    Imports

    Sections