Overview

overview

10

Static

static

10

da811750e6...df.exe

windows7-x64

10

da811750e6...df.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    da811750e64419a4e947a58af9147f37797fe6855833dd3e86bd32a8bcfab9df

  • Size

    64KB

  • MD5

    937e250455d1be2519b123b747361150

  • SHA1

    3409b96f6664882e390fd056b4ed976f222f5f00

  • SHA256

    da811750e64419a4e947a58af9147f37797fe6855833dd3e86bd32a8bcfab9df

  • SHA512

    c9db1a099f46daa584faa6537b220c5bc56a2eb68cfe67df8100f841b6aa77a93d9feb296c0ca885e7eb149904d07d447591b7f54164f4390eee4766ab50b0f7

  • SSDEEP

    384:887Ipfeatrdr67kBeT4PnyK0bFiHIZTLK7iufH0aSIiQEQfBWrBzGSU4eAC9XnO:L0pVtr7vyLLZHuPpSMBIBzGSaAC9

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.100.100:80/3Mex

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • da811750e64419a4e947a58af9147f37797fe6855833dd3e86bd32a8bcfab9df
    .exe windows:6 windows x64

    c77c4ed05311df971250fdd7c656bab9


    Headers

    Imports

    Sections