General

  • Target

    c0c7997dfb22b770118f18cca76421e1_cobalt-strike_cobaltstrike_meterpreter_JC.exe

  • Size

    234KB

  • MD5

    c0c7997dfb22b770118f18cca76421e1

  • SHA1

    591220390f007ce80c9b36fa9446398bf651870a

  • SHA256

    63f6a4e1acb545c8d34f8347a84cfb41fe2498db27ee3a04f44616fb0c6e80f2

  • SHA512

    51d3a82139215c617b8318e9f7e8f1986ce9be91dfdc162413a37526cf64a152f9994e1b22925c8cd512f1ce4c7467be4360851402ee4a879aa1fcd4f4d8edb2

  • SSDEEP

    3072:BmSJFAvTA4wOzZHlpJLlmauhWSd24LBzNg4pmejd3oFtCbVhjlUcM5n:BmSoTRwOzZH1uMN4LBzK4MsOtCbTjJ

Score
10/10

Malware Config

Signatures

  • Cobalt Strike reflective loader 1 IoCs

    Detects the reflective loader used by Cobalt Strike.

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c0c7997dfb22b770118f18cca76421e1_cobalt-strike_cobaltstrike_meterpreter_JC.exe
    .dll windows x86


    Headers

    Sections