Overview

overview

10

Static

static

10

c9845e4c0b...30.exe

windows7-x64

10

c9845e4c0b...30.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c9845e4c0bd9708810ebeb4005d84b5b27aafa6ae4fe55c18f7c454bd8543230

  • Size

    45KB

  • MD5

    7e57b0bbf9fbae20f679592408f3a545

  • SHA1

    4b04dbbf58b1b3d96fffa6b80dfc0ddd8da5c73c

  • SHA256

    c9845e4c0bd9708810ebeb4005d84b5b27aafa6ae4fe55c18f7c454bd8543230

  • SHA512

    fd1432cb7bedacbbd498d68aad5a9bc32fd3586b1997563b06d4017f55e53744292d7be48ec77fb085e10313cb84af2163c5711961bfac51fa21602cc557093f

  • SSDEEP

    384:MLmnI4XHhCucs6HUstYt2JbnnVrd9dS6yebQWRC1EI2sGWQ71MA4Y3RT:cmjT60gzVrd9dtyTWRC1asbQ78YBT

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.148.12:80/pbZ1

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c9845e4c0bd9708810ebeb4005d84b5b27aafa6ae4fe55c18f7c454bd8543230
    .exe windows x64

    63e7d788786150f71b631940346bfffd


    Headers

    Imports

    Sections