Overview

overview

10

Static

static

10

643097292b...0d.exe

windows7-x64

10

643097292b...0d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    643097292b802dd815f6ba4cf30149bb4f00b1e8c6fb88db6ce0c6302bc22e0d

  • Size

    61KB

  • MD5

    aed77ff92174715b823168ddb274ebd5

  • SHA1

    500177e60dae62a2b0370d35880004e7a0ead7c6

  • SHA256

    643097292b802dd815f6ba4cf30149bb4f00b1e8c6fb88db6ce0c6302bc22e0d

  • SHA512

    5d43a49ad5a81018b425899e5eb98c151bee3719153d88ab2e2f7f01f10029a3d958a1d47dc83e615bd72ffd0876f1b8315d9b11c547541876551c2ecd9c74e0

  • SSDEEP

    384:yFsxaepnSugZBTqA5eTwZYy7dQx9TIBFhLJ7xrgeR/W0lHXzqCZzQfByY4BE+i8Z:yFssepwO4OyqwBlxm0xDqCIBVV3A89

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.126.1:888/HVvI

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; 360space)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 643097292b802dd815f6ba4cf30149bb4f00b1e8c6fb88db6ce0c6302bc22e0d
    .exe windows:6 windows x64

    f9da30474a5cbe44ac7cc347193645ba


    Headers

    Imports

    Sections