General

  • Target

    2023-08-26_441a5c3d2bc17d0e34f725b513729352_cobalt-strike_cobaltstrike_meterpreter_JC.exe

  • Size

    206KB

  • MD5

    441a5c3d2bc17d0e34f725b513729352

  • SHA1

    cf71291bc0dcff090ed23b531dde44cb480a24da

  • SHA256

    fb65174016fa177b6f7a2a9b3ee6e94d6fe49b552ab8deb708eeec5a5d858c38

  • SHA512

    bbdb0cb6c1f13be11d99cba781784522da2cd4b0d6e62621ff26034ea39666057cb5d4996f62fb82fb6f9658e00514a0f7c41d33300678205cc844e377ea7826

  • SSDEEP

    3072:vtt49lXusmDzYdzizDIeP8CERjDXPBEDnX8VJ2nb0YzSf4lxjdUQ/5+Os:vGXurDMBizDj8CWvBEDsTtf4bjK

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

Botnet

0

Attributes
  • watermark

    0

Signatures

  • Cobalt Strike reflective loader 1 IoCs

    Detects the reflective loader used by Cobalt Strike.

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-26_441a5c3d2bc17d0e34f725b513729352_cobalt-strike_cobaltstrike_meterpreter_JC.exe
    .dll windows x86


    Headers

    Sections