Overview

overview

10

Static

static

10

cbc9d12fd0...e7.exe

windows7-x64

10

cbc9d12fd0...e7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cbc9d12fd0879809f944420693c7212171eae2edce0633f22e63603857d110e7

  • Size

    64KB

  • MD5

    0a1540d659638518cbad387b7e7b6b0f

  • SHA1

    9834e6f80d90e5341ca738187c164ace12b164fd

  • SHA256

    cbc9d12fd0879809f944420693c7212171eae2edce0633f22e63603857d110e7

  • SHA512

    1a4a40f4ddbee441f2901242339b34795dae3c995ab755f3b789a8639dfa73bb9abb897edc491ab9445a05a2a94c85de56d7c88ba3b2b51208305f9e9037e050

  • SSDEEP

    384:DI/1qseTXbQyvH/LefJIXYcfC1gjzHufVExSf6MzeO0+227MQfBXSlu1xP89Z57i:s8cyvjBXF7uNE4f6MzS+227FBCUXP89

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.0.18:443/MaBm

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0; BOIE9;ENUS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cbc9d12fd0879809f944420693c7212171eae2edce0633f22e63603857d110e7
    .exe windows:6 windows x64

    c3035865609dd4a257db5ba76e3aa1a4


    Headers

    Imports

    Sections