Overview

overview

10

Static

static

10

9ca36f8cd8...10.exe

windows7-x64

1

9ca36f8cd8...10.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    9ca36f8cd8f43a49cfa78fb7e6d8a448018760524f35b231c75f1ec964eebb10

  • Size

    105KB

  • MD5

    5af266478d4ab06df1d0bdc2cbc0a4bb

  • SHA1

    84559778e880b8766f11935b7d92d89b61421717

  • SHA256

    9ca36f8cd8f43a49cfa78fb7e6d8a448018760524f35b231c75f1ec964eebb10

  • SHA512

    04479892e28e2fcd8a0c976da72e9f86f7c7edeb236e53a3e708a49fe850397a3b23277b28b5c27fce81983febcb318f97b38b2712e2bfa3a04fa15b92b7451d

  • SSDEEP

    384:AhqCy7/k3q975tkP3iVSgS2RRJeTz6FhORsxALup3F:+qCy7/ka975tkP3iACWz6fksd

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://qax.dbapp.eu.org:8443/Rpc

Attributes
  • user_agent

    Host: dbapp.eu.org Accept: */* User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9ca36f8cd8f43a49cfa78fb7e6d8a448018760524f35b231c75f1ec964eebb10
    .exe windows:4 windows x64

    c4208bedb0b1aa299e9edbd04154464c


    Headers

    Imports

    Sections