Overview

overview

10

Static

static

10

33c5d8d9af...70.dll

windows7-x64

1

33c5d8d9af...70.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    33c5d8d9af6f4e08dfb7e2978e16c4a0d5249b20b207d0dd9e2630e98cd49b70

  • Size

    48KB

  • MD5

    fdbcd841bdf1bc00f2c8896afbddf3ff

  • SHA1

    9b09345af2d22e705be42970a6ddd5e2688ec6a8

  • SHA256

    33c5d8d9af6f4e08dfb7e2978e16c4a0d5249b20b207d0dd9e2630e98cd49b70

  • SHA512

    7222f6187a85139c7907d6aec3886e353b34a0c211e477ae5b0944cd90ed8836345ef27c7ae654c26a292722924400e5ff2ae8d6003a8be9bb6a5b0f80ccd880

  • SSDEEP

    768:X9crojS2MqJRJMomfB3xMizAGNHCHnxtKTQ3bxdjcrN0oNPqfuQ:2qJRmHZzAGQHrU+dhfuQ

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://8.137.10.228:50061/7msF

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; WOW64; Trident/5.0; msn OptimizedIE8;ENUS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 33c5d8d9af6f4e08dfb7e2978e16c4a0d5249b20b207d0dd9e2630e98cd49b70
    .dll windows x64

    4eacd9b7a4ee4950828e28822605c7d7


    Headers

    Imports

    Exports

    Sections