Overview

overview

10

Static

static

10

c0a5640d60...6e.exe

windows7-x64

1

c0a5640d60...6e.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c0a5640d60018f4348c97a1709d273c5cda0b28350902c035bc8d5d3c4d4956e

  • Size

    1.8MB

  • MD5

    826b2287eb1e038591f510e1e7b2db4c

  • SHA1

    c46209dfa11528a650e88ee422af35580fe8c771

  • SHA256

    c0a5640d60018f4348c97a1709d273c5cda0b28350902c035bc8d5d3c4d4956e

  • SHA512

    48953849e278300d78e97f1f908fff286260db1f82c476697b0edb89470326e49c1ba978d08f368bf8f10c5c571020912a2334ca2cf268f3e2a137d861090a61

  • SSDEEP

    49152:F6HGRFC96ag1j0fVrD13TjEAmb4+ow4x9:NC9g0blQ

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.0.103:9999/KLsS

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; NP08; MAAU; NP08)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c0a5640d60018f4348c97a1709d273c5cda0b28350902c035bc8d5d3c4d4956e
    .exe windows x64

    9cbefe68f395e67356e2a5d8d1b285c0


    Headers

    Imports

    Sections