Overview

overview

10

Static

static

10

1d04dc4cba...c6.exe

windows7-x64

10

1d04dc4cba...c6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1d04dc4cba658dfdc936341b3fb5b9e507e7eac4c89fb1b332e0ce6e180b1cc6

  • Size

    26KB

  • MD5

    e3d6aa37803e8221c346f7e994dbc85a

  • SHA1

    facac0f3ae8c895210498c753e6d44330173d224

  • SHA256

    1d04dc4cba658dfdc936341b3fb5b9e507e7eac4c89fb1b332e0ce6e180b1cc6

  • SHA512

    561aa29fd5446405dbf0c7580b79b1de983832abcebf12cea71f099496e3e2f6f21a89063b4c923f7bfee94bb0d4fa4137bed2ca37a06d3b140ed90797a5da39

  • SSDEEP

    384:j/w8so8FqgT5RZzza1KAPk3mdHz43PtMss8ss:j48EljXaDPk3mdEak

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.18.130:29000/jquery-3.3.2.slim.min.js

Attributes
  • user_agent

    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.34 Safari/537.36 Edg/

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1d04dc4cba658dfdc936341b3fb5b9e507e7eac4c89fb1b332e0ce6e180b1cc6
    .exe windows x64

    84d1012ac2b385a508d511245069ec24


    Headers

    Imports

    Sections