Overview

overview

10

Static

static

10

09df220d05...07.exe

windows7-x64

1

09df220d05...07.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    09df220d05cc0b8c572496c60de758caf4856341685712aeff340dc4b5555e07

  • Size

    11KB

  • MD5

    ef7c2181d12d1745578f271431c5c899

  • SHA1

    12bcf364fb7e86326d6e9511374702e316548914

  • SHA256

    09df220d05cc0b8c572496c60de758caf4856341685712aeff340dc4b5555e07

  • SHA512

    574c64602b098985f391d552722e39acf1ff474cdf69acf9a9ee683437491b38e4fd385e23434a136bba175158e89fb7acb66e394da6bcbcf0512d84bee83525

  • SSDEEP

    96:R7mNVy2UbP3L0Qi2u3XKa//D10SXJcLBe+11psD22b6wb4yim73Q5tf0QrOJaQ1u:RHbPgQzun30FBe0i6mbD3Q5tf/rwh

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://10.128.156.12:443/LvVE

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; WOW64; Trident/5.0)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 09df220d05cc0b8c572496c60de758caf4856341685712aeff340dc4b5555e07
    .exe windows x64

    4ff98788b6fefb0963649625d2cc7416


    Headers

    Imports

    Sections