Overview

overview

10

Static

static

10

4f1839a154...bb.exe

windows7-x64

10

4f1839a154...bb.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4f1839a15424837a0ebf1f5b7286079695e06a58aca42cdff9ce31ace95ef4bb

  • Size

    253KB

  • MD5

    cc7769cebe08b6de2ffaf7c8ba96195e

  • SHA1

    cceee893f8901f2a96a76558b7ed958c0575f3cd

  • SHA256

    4f1839a15424837a0ebf1f5b7286079695e06a58aca42cdff9ce31ace95ef4bb

  • SHA512

    d399e32b70a4835990bfd9751692e4baf0b6c9fcc4cbeceff3c3bd72013588a042b8a8328a4a34de5359ddf34cf57c733d195beb6e18ba88b093d573d8f723e1

  • SSDEEP

    3072:sHg6zHihzgURZ9ETQnl0tYc418PJZ8m1s7+YG+untEYFDNYRGkW4z/cBd:d6zHiv1ngY0LbDNbRBd

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://124.71.11.42:10000/xE4l

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4f1839a15424837a0ebf1f5b7286079695e06a58aca42cdff9ce31ace95ef4bb
    .exe windows x64

    1850e1c2972581d1d04becf11dbee535


    Headers

    Imports

    Sections