Overview

overview

10

Static

static

10

88d0ecfa17...af.exe

windows7-x64

10

88d0ecfa17...af.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    88d0ecfa17450dafd74eb8fcb86d55514fe8af2f37c5def2f1d9d4af0c0db1af

  • Size

    188KB

  • MD5

    1eda716415c9191406fbbf88b34914f9

  • SHA1

    8ae83cbb60a44136f76a38e5d4e2de139398723e

  • SHA256

    88d0ecfa17450dafd74eb8fcb86d55514fe8af2f37c5def2f1d9d4af0c0db1af

  • SHA512

    108421e742119fdc455a141da6ea483de1ee47245a31af2237b55a16a06796e371eb1ca3fb13c4d8ccd79db5d9614e50c8abc44a3a71280ad67e6177af7e094e

  • SSDEEP

    3072:9m2q6XRgz8upt+72dai0x/w6DHF4pIiyWzYShj:ZCPdai0x/bDHF4pIXkYShj

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://124.70.10.142:2222/Esp5

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; BOIE9;ENUS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 88d0ecfa17450dafd74eb8fcb86d55514fe8af2f37c5def2f1d9d4af0c0db1af
    .exe windows:4 windows x64

    d31f0bc6d8a36658b0b5dbb1ef35ddd6


    Headers

    Imports

    Sections