General

  • Target

    2023-08-23_1ce1fd3e538532bc02b06be7b072611d_cobalt-strike_cobaltstrike_meterpreter_JC.exe

  • Size

    208KB

  • MD5

    1ce1fd3e538532bc02b06be7b072611d

  • SHA1

    e219e2215a2227684aa5520a98ee2ea9bfd55f5b

  • SHA256

    6a2f23cab95836c639675a124660886c1ae140eade4d0c46c8568b54155fe542

  • SHA512

    63f197c95b1fb711df4fb359de598c5446df7c31c7ab27de46c8eff333a9f4276bdb961c1adaa77f571653ad8a19a1be4d541ec8b8c36cd8a61d76937437cf4e

  • SSDEEP

    3072:LQCKSxiBfXExKtZ8CUwMLrAJw/CpFPyxD+765jdUh+Y5v:LQDfXEkb8CRMnAJw6kD+7+j

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

Botnet

0

Attributes
  • watermark

    0

Signatures

  • Cobalt Strike reflective loader 1 IoCs

    Detects the reflective loader used by Cobalt Strike.

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-23_1ce1fd3e538532bc02b06be7b072611d_cobalt-strike_cobaltstrike_meterpreter_JC.exe
    .dll windows x86


    Headers

    Sections