Overview

overview

10

Static

static

10

39eee597d5...5e.exe

windows7-x64

10

39eee597d5...5e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    39eee597d537b057f0dc296e4feb8a541823c834e48ffdb9088e2217b912435e

  • Size

    224KB

  • MD5

    dfc8a7aebde191352ec17668e7ec8ab2

  • SHA1

    f51ffc8078a555d44f2fa3feb1d0c972f2307614

  • SHA256

    39eee597d537b057f0dc296e4feb8a541823c834e48ffdb9088e2217b912435e

  • SHA512

    aab3fab04edeb0d2e0b27a8dd297e9ac59265468f1a0140cf5c025d048bdd84c9b64c69da985ea3143056eca3d8ea43f8f8850e83ab2398054aa2fab505c814a

  • SSDEEP

    6144:2WxY44B/THZN1SpbGrL/XGKj2cz3ohsGrK:6h/DZmpCnXG2zoE

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.238.129:80/DiKe

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.2; .NET4.0C; .NET4.0E)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 39eee597d537b057f0dc296e4feb8a541823c834e48ffdb9088e2217b912435e
    .exe windows x64

    3ef00d9f7073f66f57bb929dc032a08e


    Headers

    Imports

    Sections