General

  • Target

    da4e2c0befa6dffe3988dd7b922ac6a4_cobalt-strike_cobaltstrike_meterpreter_JC.exe

  • Size

    234KB

  • MD5

    da4e2c0befa6dffe3988dd7b922ac6a4

  • SHA1

    5e88faa264694765a83762cdbefd4858652b6f64

  • SHA256

    c3e7db4d67a0b53d1c138a13c2ec7af5ea6ab9b44c9f71c68f4c4101d419d92f

  • SHA512

    da54a56386b5e04bd1981abb7a982c7b149736e107779911a31aed1ece1da337a5aa571b386e19593987d4ab2c4a8085590eed1bd0c48b7736f7037d72e5c0b2

  • SSDEEP

    6144:heG6jC5HV8ZHxRTFimaeTMYoBM6nTHYj:heGuCdURtcmAZTHYj

Score
10/10

Malware Config

Signatures

  • Cobalt Strike reflective loader 1 IoCs

    Detects the reflective loader used by Cobalt Strike.

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • da4e2c0befa6dffe3988dd7b922ac6a4_cobalt-strike_cobaltstrike_meterpreter_JC.exe
    .dll windows x86


    Headers

    Sections