General

  • Target

    2023-08-22_722fcfd57579d83bed24a9b5f9f1cc18_cobalt-strike_cobaltstrike_meterpreter_JC.exe

  • Size

    206KB

  • MD5

    722fcfd57579d83bed24a9b5f9f1cc18

  • SHA1

    407b63bdd451e6b4484ef82bd72295755c4890f5

  • SHA256

    e501014b555c1ec84593864c7211752f9ddde51b5505701a2f06d4bb29a26c5f

  • SHA512

    0030097d6302fc17488bea380a88cf15a596496d2df514dcc96827c03366edf185c570f52d748bb807141e8f5332bf2844ac1588c01ceb4abbfd28ae33a78ffc

  • SSDEEP

    3072:Io4blbXuqZQxoXzS8CsV3cUHMWR9ok6IxxfFj1UK5N:ILXueQau8CSsklRbxxtj

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

Botnet

0

Attributes
  • watermark

    0

Signatures

  • Cobalt Strike reflective loader 1 IoCs

    Detects the reflective loader used by Cobalt Strike.

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-22_722fcfd57579d83bed24a9b5f9f1cc18_cobalt-strike_cobaltstrike_meterpreter_JC.exe
    .dll windows x86


    Headers

    Sections