Overview

overview

10

Static

static

10

f491dd3170...90.exe

windows7-x64

3

f491dd3170...90.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    f491dd317096e4f57812e2aae98ea202246a5736a0a847bd596b86a5c8530290

  • Size

    9KB

  • MD5

    61e4cc48aa93a445b33f1365bb33d47d

  • SHA1

    e06785aa8f97feaf991e307704625b68db65aad4

  • SHA256

    f491dd317096e4f57812e2aae98ea202246a5736a0a847bd596b86a5c8530290

  • SHA512

    0e4b588159d03c67aa71d5397125dc8526589ec55bbb2813c56bfe55e6c79a4156fcbdbeb0028b7b971e5d24ad939c40702beba5fc63459f17abc63c52fbe24a

  • SSDEEP

    192:rBR9H8I7h3E3XOcDjORBYJHE7E5pz6rJoZgmqSv:rV8G3IXOOjosE7mOmN

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://110.41.13.52:80/SEpU

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; BOIE9;ENUS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f491dd317096e4f57812e2aae98ea202246a5736a0a847bd596b86a5c8530290
    .exe windows x86

    915e9ffd7926e5faea15041daa79f3ab


    Headers

    Imports

    Sections