Overview

overview

10

Static

static

3

8a2a797fa6...29.exe

windows7-x64

10

8a2a797fa6...29.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8a2a797fa66a63d17fac6e0b76ad9f03f4702f6d4748aa22dd1e6e2f78a03729

  • Size

    5.6MB

  • Sample

    230920-g7m1zaee2y

  • MD5

    f10cfe3dbb63e07c9b8cff968cfc73e8

  • SHA1

    4995e8e297a7f446f236dde678a5febaf06618e2

  • SHA256

    8a2a797fa66a63d17fac6e0b76ad9f03f4702f6d4748aa22dd1e6e2f78a03729

  • SHA512

    2bd3ae19dff68b8b0aabd508a2fd9d90dd40ff1452ae60f071580c3361d48b12a52e98a89f0eaba9e430b87d7dc0503af896308d5f505503c253ef9d98f528e3

  • SSDEEP

    98304:x38ZUfsqjMy8pzoLLJ3TbwaVvrZE0I8Gsmr+qK9QRdJOFFMFa+JsHL/jZYiUWLYT:x34QjMy89onJ5hrZEThbJMFj+WPZYiZC

Score
10/10
cobaltstrikebackdoorpyinstallertrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://1.116.127.12:9999/m4Lp

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0; MASP)

Targets

    • Target

      8a2a797fa66a63d17fac6e0b76ad9f03f4702f6d4748aa22dd1e6e2f78a03729

    • Size

      5.6MB

    • MD5

      f10cfe3dbb63e07c9b8cff968cfc73e8

    • SHA1

      4995e8e297a7f446f236dde678a5febaf06618e2

    • SHA256

      8a2a797fa66a63d17fac6e0b76ad9f03f4702f6d4748aa22dd1e6e2f78a03729

    • SHA512

      2bd3ae19dff68b8b0aabd508a2fd9d90dd40ff1452ae60f071580c3361d48b12a52e98a89f0eaba9e430b87d7dc0503af896308d5f505503c253ef9d98f528e3

    • SSDEEP

      98304:x38ZUfsqjMy8pzoLLJ3TbwaVvrZE0I8Gsmr+qK9QRdJOFFMFa+JsHL/jZYiUWLYT:x34QjMy89onJ5hrZEThbJMFj+WPZYiZC

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks