General
-
Target
d59af95046f9c02b4b355028a009c8dd_cobalt-strike_cobaltstrike_meterpreter_JC.exe
-
Size
218KB
-
MD5
d59af95046f9c02b4b355028a009c8dd
-
SHA1
b74cc357de9cbff0f30ffb1c77f255f726586f44
-
SHA256
3edca3ab36eb4877e8f6985be9f7e6db757f1e18804c7552da9bfb100e0937b8
-
SHA512
f73ec8ac124b7597e6805280d44299533618caa882d81d5fd1d6a94cff47a82ca1298445252165aa2bdd965ec3d5ce18e77911b59d89d0f71898799bd5e3563f
-
SSDEEP
3072:KbLiLdZXSMeJcEdoUa8IYs0jd+GxWNO+AzL6DMXatptgBjdUh5qq:KbLULOcEdna8IVy+iQszXXatpSjx
Score
10/10
Malware Config
Signatures
-
Cobalt Strike reflective loader 1 IoCs
Detects the reflective loader used by Cobalt Strike.
-
Cobaltstrike family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
d59af95046f9c02b4b355028a009c8dd_cobalt-strike_cobaltstrike_meterpreter_JC.exe
Headers
Sections