Overview

overview

10

Static

static

10

804c9e9dde...bd.exe

windows7-x64

10

804c9e9dde...bd.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    804c9e9dde10e9b74264355dc31b318008d9aec58b5417895770b8f145edb1bd

  • Size

    4.4MB

  • MD5

    7613876e4c21da10f2df3e9a98d8f1e2

  • SHA1

    6d279ee9b12248e9d591ca4b7b91c1424d361bd2

  • SHA256

    804c9e9dde10e9b74264355dc31b318008d9aec58b5417895770b8f145edb1bd

  • SHA512

    687573a2c241d04113faada7560c23eb95a0c5ca53a6336888b2198cad8a91a9d199e6df97deec865c1f9c274a9cf9156586dd116ae88081c64bc80cd2318680

  • SSDEEP

    98304:F5Fe7GNUOiGyUu+uYDv1v8XUsZ79HMFdV0xyIJBWHSyYqo1gvVI:F58oFfTu+uYDvlsUs/QV0AxHSSoT

Score
10/10
pyinstallercobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://68.170.2.250:6666/lBMb

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 804c9e9dde10e9b74264355dc31b318008d9aec58b5417895770b8f145edb1bd
    .exe windows x64

    0b5552dccd9d0a834cea55c0c8fc05be


    Headers

    Imports

    Sections

  • shellcode.pyc