Overview

overview

10

Static

static

10

0936a890f6...84.exe

windows7-x64

10

0936a890f6...84.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0936a890f6479437de09d18a8195d46bc5926596f12e5a8cf7d03187de11fd84

  • Size

    61KB

  • MD5

    ac3c6c32f4ef9ed47ebf848c2299b2db

  • SHA1

    548e3edfac9b6f6d3509c693148d1f255bd9479b

  • SHA256

    0936a890f6479437de09d18a8195d46bc5926596f12e5a8cf7d03187de11fd84

  • SHA512

    63668c009f064526b36b1b95ee3c77def93d167bbb08f1ce6a2a94592fd68fe567a97bcfdd4593dc59b60ea483a50ae633ce1f4b1a9d34c3e83261a0701d0a4f

  • SSDEEP

    384:eoEhXheTZ+eyh3Q0TNIDs1xxVlhHAvoyzUetN2bnHW5QfBX80lrY+P89Z7L:q2jyhArDS2dzXtsHWgBxY+P89

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.106.128:80/GLuU

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; BOIE9;ENUS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0936a890f6479437de09d18a8195d46bc5926596f12e5a8cf7d03187de11fd84
    .exe windows x64

    9bb87f18cfa5c3d6f1018b8724bf17e4


    Headers

    Imports

    Sections