General

  • Target

    f7a3b8b17c00ac4fd1e27662923b1c3d_cobalt-strike_cobaltstrike_meterpreter_JC.exe

  • Size

    204KB

  • MD5

    f7a3b8b17c00ac4fd1e27662923b1c3d

  • SHA1

    f3fd5eb1c3808c4794f751cc1a9c7ec48bbe7a63

  • SHA256

    1052414212d28201a289ad9ae45a4b9677879db62afe17328fd6ece6dd072bbb

  • SHA512

    1e7361e39c635714dbe8cb839f215b40f81daa809518384ebd2a26a75bbf8c9b854355b024e44beb3b6a328f2436f3cdbd5098ec3bc16c163c97fc3048910ced

  • SSDEEP

    3072:ba+ReMFGbYoLGvqDc59QOIMAEqifYTCljYUV5U:W+h4ksGcC9QTMRfS6j

Score
10/10

Malware Config

Signatures

  • Cobalt Strike reflective loader 1 IoCs

    Detects the reflective loader used by Cobalt Strike.

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f7a3b8b17c00ac4fd1e27662923b1c3d_cobalt-strike_cobaltstrike_meterpreter_JC.exe
    .dll windows x86


    Headers

    Sections