Overview

overview

10

Static

static

10

c9a1f8ff83...7e.exe

windows7-x64

1

c9a1f8ff83...7e.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    c9a1f8ff83cf5d7b793f8ddeca73d825f9f93e281fb9f1c0b6dae0805b6d2e7e

  • Size

    13KB

  • MD5

    9cae4da3dc3dd2aa66d1c552854b9b73

  • SHA1

    a6be5f7b39f2f1532bb472f9334fb3a96d34bb6c

  • SHA256

    c9a1f8ff83cf5d7b793f8ddeca73d825f9f93e281fb9f1c0b6dae0805b6d2e7e

  • SHA512

    7f7ba814a36c03c8563b22ab29c23ef5255d42d0498e2fe7fd580e64c45c38dd38685658fdad294f7e551363f0d925ffd96de053ec95ee413ecf51f8148b61e7

  • SSDEEP

    192:aK/sQ44O5/eqd/YwhPMJH3P3Q5tfTcmEn:f/sQ44gxd/YCiP3uEn

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://124.226.64.130:29003/jquery-3.3.2.slim.min.js

Attributes
  • user_agent

    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.34 Safari/537.36 Edg/

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c9a1f8ff83cf5d7b793f8ddeca73d825f9f93e281fb9f1c0b6dae0805b6d2e7e
    .exe windows x64

    427e39eed6c4aaa160e549709dc54268


    Headers

    Imports

    Sections