Overview

overview

10

Static

static

10

162eed95e1...41.exe

windows7-x64

1

162eed95e1...41.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    162eed95e169963d30a0f600a22fed40912ba3be8454f969814cb5ea59785e41

  • Size

    105KB

  • MD5

    5064b67a99dbd138946e04491f2dcf85

  • SHA1

    dfb28b512a14d108e6029fb5cc179d0cd535222c

  • SHA256

    162eed95e169963d30a0f600a22fed40912ba3be8454f969814cb5ea59785e41

  • SHA512

    424c21c65b567ebcaa2247ccb7d1e56614aac185e76dbed4b92ec0dfd0da2ce5fc0ffbed2b304edd3a43438027f355793e5078fcac4a4b2e56b6eb97fb24bfd8

  • SSDEEP

    384:AhqCy7/k3q975tkP3iVSgS2RRJeTz6FhORsxAL:+qCy7/ka975tkP3iACWz6fks

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://qax.dbapp.eu.org:8443/Rpc

Attributes
  • user_agent

    Host: dbapp.eu.org Accept: */* User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 162eed95e169963d30a0f600a22fed40912ba3be8454f969814cb5ea59785e41
    .exe windows:4 windows x64


    Headers

    Sections