Overview

overview

10

Static

static

10

da699e9b57...27.exe

windows7-x64

1

da699e9b57...27.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    da699e9b57becb47c4423210b9032b0e3a0a08c5749ab8293483046ac29f3427

  • Size

    985KB

  • MD5

    b358bdcf8c4b381dd130b1c29545555c

  • SHA1

    363e07ce5eee9c4250bc152d6fff66816e476973

  • SHA256

    da699e9b57becb47c4423210b9032b0e3a0a08c5749ab8293483046ac29f3427

  • SHA512

    11a56e7526fc793fcd0119dcfbf8f0abb61532cb718006f0176099d2ab67a71330cab02e8a48ee5723795190822959d26a7523f96b8e79b477249a9c9a5e6a8e

  • SSDEEP

    24576:p6faYe1czRMx78WF6ELXqcO5n84V87+kVaj:jm68qqX5n84ivVa

Score
10/10
pyinstallercobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://101.42.141.189:9099/BnSZ

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; Touch; ASU2JS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • da699e9b57becb47c4423210b9032b0e3a0a08c5749ab8293483046ac29f3427
    .exe windows:5 windows x64

    ba5546933531fafa869b1f86a4e2a959


    Headers

    Imports

    Sections

  • miansha.pyc