General
-
Target
2023-08-27_4e3ef17c68fb035175105807ea8cac52_cobalt-strike_cobaltstrike_meterpreter_JC.exe
-
Size
204KB
-
MD5
4e3ef17c68fb035175105807ea8cac52
-
SHA1
a5a3daf44bed0e2847a03b68fb4d3df75e367fd4
-
SHA256
9c837c4c37b21b19d8233019339fc9a1828d2d325f3e3451de0302623009f129
-
SHA512
91b0587c47bb04f351f3fb233c76f2b2796540f973c94df775e805b8c79c1be832a81b3c92aa729d6133de8565df98bb38038afe7afa570b3fc1559db06adc39
-
SSDEEP
3072:iFna2JSkcrnYSdM50RAXSPy0qUiS0Lxh5H4evyzIhjQUcn5t:URYkcrY4MCIt07iPlvUYjg/
Score
10/10
Malware Config
Signatures
-
Cobalt Strike reflective loader 1 IoCs
Detects the reflective loader used by Cobalt Strike.
-
Cobaltstrike family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2023-08-27_4e3ef17c68fb035175105807ea8cac52_cobalt-strike_cobaltstrike_meterpreter_JC.exe
Headers
Sections