Overview

overview

10

Static

static

10

8b337cc82a...17.exe

windows7-x64

10

8b337cc82a...17.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8b337cc82a848e91ac982b89135539d60e2072231a282458a327085ba361bf17

  • Size

    432KB

  • MD5

    a02f54ecb2b820693a64ed8f8a517c48

  • SHA1

    f3ebe1a14cf513185f20af2a4bdc2b621be5e202

  • SHA256

    8b337cc82a848e91ac982b89135539d60e2072231a282458a327085ba361bf17

  • SHA512

    adf2ca640e44779bc89c32948697bbb6af63b293fc9d1182963e981c4d69fafd2d1813264c40089df6c250b0ff3f73f923c57de08bf0d91d1475595b33407943

  • SSDEEP

    12288:riVaJGrqXH6XqQWB8GdV3ytzFVVqHD+sBgEIuWz6:rLGKnQzzFVVo

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://64.69.40.189:8880/MKKz

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; FunWebProducts; IE0006_ver1;EN_GB)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8b337cc82a848e91ac982b89135539d60e2072231a282458a327085ba361bf17
    .exe windows x86

    769311c3559015db48141fef5c374e1f


    Headers

    Imports

    Sections