General

  • Target

    4cd721d84dc13905e5ee627bbd4f992267ab820775735e15201b472eea2e0bd3

  • Size

    252KB

  • MD5

    c620865e0c6c0c1e93dd894fa5540fc2

  • SHA1

    b929f27b062cd8ce9ee2021a9f796a6c45fcb0a9

  • SHA256

    4cd721d84dc13905e5ee627bbd4f992267ab820775735e15201b472eea2e0bd3

  • SHA512

    950a8f1fa3ef8dd4fce38e1f56b6ebb4b5c1f465f2ea538b31bf93a887147c737798ed1ab7494848f9d33e6f914839ceb1717f47367a0100a22ca8a178445d72

  • SSDEEP

    3072:610riDVhyiRZ9vWig2LEEA418PJZ8m1sBQ3Pvu2tEdFDNYRGeZBN:FriDVbY2YEIfiDNbiBN

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://175.178.242.75:50002/ZRkF

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)

Signatures

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4cd721d84dc13905e5ee627bbd4f992267ab820775735e15201b472eea2e0bd3
    .exe windows x64

    11f977f99319449b041bde4a50822a95


    Headers

    Imports

    Sections