Overview

overview

10

Static

static

10

18395cea8d...3d.exe

windows7-x64

10

18395cea8d...3d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    18395cea8d558e575543a2917c3b5dac600d988eb1445026dd7b5754879d3e3d

  • Size

    12KB

  • MD5

    404809d402b9eee383fb4686880f994f

  • SHA1

    44183c1cf074f7125308fc89716ae59a179a4b1a

  • SHA256

    18395cea8d558e575543a2917c3b5dac600d988eb1445026dd7b5754879d3e3d

  • SHA512

    42e2d703e92dd149a697b05f3adca9cd2668e9f1cfa7ae63ea8c7c3780d375eb22075a824b4024a6ede8c3a37f6f236ec3a32100a6dacd5c64c802a0402a0a6e

  • SSDEEP

    192:2CgVloQhI48LYTsIGPFtGQlnaJSoTk//l3Q5tfBD:2VoQhI4mY+tGe9/93

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.254.128:8899/ajJH

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET CLR 1.1.4322)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 18395cea8d558e575543a2917c3b5dac600d988eb1445026dd7b5754879d3e3d
    .exe windows x64

    ee0a7a3802a9c2ff9b2e60ccc20abb93


    Headers

    Imports

    Sections