General

  • Target

    d6a1e3c62725b3e4e550cb910581ccc3_cobalt-strike_cobaltstrike_meterpreter_JC.exe

  • Size

    218KB

  • MD5

    d6a1e3c62725b3e4e550cb910581ccc3

  • SHA1

    3df601275efc1ec4f002a37e88fc2b67db0b9063

  • SHA256

    8fb6a23e43362db20a6fc03108c4d04ad9f325270f95bb3f811d3a9b62324383

  • SHA512

    0a46e1f5bbb509182a4bc834d76379cfb1235facae64ef7387608a30b3ad2333e6ea9d8d07e2ebf77fb085bbd63524d2258015360afbec69f74052569e549d4f

  • SSDEEP

    3072:+dItp5pS6STq0Lc/8IMw6pv8MhGNf9IJqNQHwvgZjQWUH5d:+dKxYq0LU8IFg84QfWnHwvYj

Score
10/10

Malware Config

Signatures

  • Cobalt Strike reflective loader 1 IoCs

    Detects the reflective loader used by Cobalt Strike.

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d6a1e3c62725b3e4e550cb910581ccc3_cobalt-strike_cobaltstrike_meterpreter_JC.exe
    .dll windows x86


    Headers

    Sections