Overview

overview

10

Static

static

10

054a219ef3...bd.exe

windows7-x64

10

054a219ef3...bd.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    054a219ef3818a184393b32e9b5de50cdd43f37da18c12ee4654e92341c588bd

  • Size

    1.6MB

  • MD5

    f8f2ddf8807402f1f64f5ab8eb0bd6ea

  • SHA1

    774130e65f2a6fdbd4fd2c057573f5d301d84550

  • SHA256

    054a219ef3818a184393b32e9b5de50cdd43f37da18c12ee4654e92341c588bd

  • SHA512

    37d024a76ac914cee121b862e72f8c741fe1373949fc81948f528a210a9b57972d1a9b49ad51a55cf770fc9e803a713a70b109ee388a938bc684a9091f7e158e

  • SSDEEP

    49152:H2+8WUB9rb/TsvO90d7HjmAFd4A64nsfJggtaGvb/QUKKpKwTNv:wcGTQdEKwNv

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://120.46.216.172:3321/mYIN

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 054a219ef3818a184393b32e9b5de50cdd43f37da18c12ee4654e92341c588bd
    .exe windows x64

    9cbefe68f395e67356e2a5d8d1b285c0


    Headers

    Imports

    Sections