Overview

overview

10

Static

static

10

3a00bd8c75...17.exe

windows7-x64

1

3a00bd8c75...17.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    3a00bd8c75a71e1a348fccadbf05f4ec31b114aa4db9601ba34fa3a2347d3817

  • Size

    151KB

  • MD5

    6aacaa89d41de4b4cb4505f1165f50ee

  • SHA1

    3b227eed4bdec0d25ac0a7a52ab10206a3410716

  • SHA256

    3a00bd8c75a71e1a348fccadbf05f4ec31b114aa4db9601ba34fa3a2347d3817

  • SHA512

    584f592a04ca314a608c5ca4381673e627e1e53c18212e7e1301dd555a724ca9f4b7c812a59051978c1c5ffdd7ad642b6400dcbf9604a727d39e57b40a71121a

  • SSDEEP

    3072:to/38rBMoi/aEQ2QJcDpFvHyhuch7vHDAcz:w38rBMo4ZQqDrvevkcz

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://34.146.153.183:443/bootstrap-2.min.js

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/5.0)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3a00bd8c75a71e1a348fccadbf05f4ec31b114aa4db9601ba34fa3a2347d3817
    .exe windows x64

    225a04d47c1d1a76012bc85d0fc1bcad


    Headers

    Imports

    Sections