General
-
Target
d33914580bf8cb6d6b4bca1dd87ae504_cobalt-strike_cobaltstrike_meterpreter_JC.exe
-
Size
234KB
-
MD5
d33914580bf8cb6d6b4bca1dd87ae504
-
SHA1
0392ab0f1cf4aaa462f1e2660e18427e9ecd0cbe
-
SHA256
31baab73bd9825ea871299bd97b44da6aca0cf6b24b957e02a0c0017287d1300
-
SHA512
32f8cf434520c30d7c5cc6f409dcadaa083bd458f1f585602a52569f141e73c2a2add0ec9d981024d3438b623386fb3fb3fe88108a187e13397e58a262fa9914
-
SSDEEP
3072:ZNHdqGU5pl9JMZHyckmRyASJPa1FLWF1Fgk7YAN3rD8zzk7jf2HtjdUcn55:ZNHC5NJMZHL4PmYRgk7/NbKQjf2Nj
Score
10/10
Malware Config
Signatures
-
Cobalt Strike reflective loader 1 IoCs
Detects the reflective loader used by Cobalt Strike.
-
Cobaltstrike family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
d33914580bf8cb6d6b4bca1dd87ae504_cobalt-strike_cobaltstrike_meterpreter_JC.exe
Headers
Sections