General
-
Target
cbcfd168bcc36e1f09aff275de5944e6_cobalt-strike_cobaltstrike_meterpreter_JC.exe
-
Size
218KB
-
MD5
cbcfd168bcc36e1f09aff275de5944e6
-
SHA1
9defc51af1a4571eb15e391b596141f08bf2aa7b
-
SHA256
395e67184306ce16a2697ffb8d8ea21c9382a1f581cc1ee748d3a90065a388ea
-
SHA512
6c72b58f33a51383b79e2aae585d75a39bab6e2502eb3c95eb10193e3f7c6a5afa4e8d6a222f5083b11c3f5257c0fa74190f551ba85d9ffdd2f8ad763b138088
-
SSDEEP
3072:MJ2poPftQSDAl/kBD5y8Im+hOuJ7tGrKBkQYouhnjGtjlUz5Q:Mk6QsAmBD08IlXJZuykZhnjuj
Score
10/10
Malware Config
Signatures
-
Cobalt Strike reflective loader 1 IoCs
Detects the reflective loader used by Cobalt Strike.
-
Cobaltstrike family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
cbcfd168bcc36e1f09aff275de5944e6_cobalt-strike_cobaltstrike_meterpreter_JC.exe
Headers
Sections