General
-
Target
2023-08-22_9d9b9bbb5fbef12cbbcd56a3158f38a7_cobalt-strike_cobaltstrike_meterpreter_JC.exe
-
Size
248KB
-
MD5
9d9b9bbb5fbef12cbbcd56a3158f38a7
-
SHA1
fe6ac47b772512c26661fd378fe90f4f642efdc1
-
SHA256
b259f7072955249023731f313fdc781e3423ed31a9920c5d31e2cfdf1b5ac763
-
SHA512
a4d272a23f62ebab8b8fa3c8cff2f7f177e021d5970ac67ceb6e67a1a114fa4c2512646b3ace4398848aa77747a601ce2e66184061bf987a211ea016929dca58
-
SSDEEP
3072:b6SlpHXu+jaBMR/08CMxr2ykyN3aaOTkIId3dJjtUN5ihj:bhXukasc8CmSyNNecd3bj
Score
10/10
Malware Config
Signatures
-
Cobalt Strike reflective loader 1 IoCs
Detects the reflective loader used by Cobalt Strike.
-
Cobaltstrike family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2023-08-22_9d9b9bbb5fbef12cbbcd56a3158f38a7_cobalt-strike_cobaltstrike_meterpreter_JC.exe
Headers
Sections