General
-
Target
e4d0cbe3ed211737324d1a79e7348faf_cobalt-strike_cobaltstrike_meterpreter_JC.exe
-
Size
234KB
-
MD5
e4d0cbe3ed211737324d1a79e7348faf
-
SHA1
0a2f2ba964334106a4b0782bb2cfa65b744f7821
-
SHA256
a612443ed797750af60015a113d4f434a705dff4c75bdc61a92f0436fbf99ad2
-
SHA512
3ad5dd45d66a15940b30723952fec14cbe90a1083551450a9d8aa11c105913c58b4ed031a58abef0db6e75362e74efa34edab6d004ef1d87d229cb4c26246387
-
SSDEEP
3072:o8oRjYdvCSG6ZHVV7BXSwkd8y/ykBzJhUk5kOlRZk5BIDRPNjVUR5E:o8o8vNG6ZHhkajkBzJCkWEqBIDR1j
Score
10/10
Malware Config
Signatures
-
Cobalt Strike reflective loader 1 IoCs
Detects the reflective loader used by Cobalt Strike.
-
Cobaltstrike family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
e4d0cbe3ed211737324d1a79e7348faf_cobalt-strike_cobaltstrike_meterpreter_JC.exe
Headers
Sections