Overview

overview

10

Static

static

10

d28dae13e5...6f.exe

windows7-x64

10

d28dae13e5...6f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d28dae13e5bf0d065c281e9349405774a0a808edd7a6f0789438a9bc1255fc6f

  • Size

    61KB

  • MD5

    f87cc413db5e20e5cb16eead3a9941bd

  • SHA1

    8817a444093053a190f7ac5f6c07757ad9b5fcd5

  • SHA256

    d28dae13e5bf0d065c281e9349405774a0a808edd7a6f0789438a9bc1255fc6f

  • SHA512

    9d94d77994b5b64954c6637b756a375b35bc7106f7894473128d7143e0e27853a31a7c7dcf06229fa7c6aa98ea5281160fdca02b85dab9a52625250d4aefa48f

  • SSDEEP

    384:ZoJaEpc6+Ar6BGireTUhasyaGRpilzIz6JQSbPeBIHkvegcMM0QfByxA89XnO:pEpAdoilpyj9O9bPe4gsMMNBEA89

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.0.101:84/QMoP

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; BOIE9;ENUSMSE)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d28dae13e5bf0d065c281e9349405774a0a808edd7a6f0789438a9bc1255fc6f
    .exe windows:6 windows x64

    e5ddcb5f7526007bd97a14ac757411ea


    Headers

    Imports

    Sections