Overview

overview

10

Static

static

10

9b808bdda1...80.exe

windows7-x64

10

9b808bdda1...80.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9b808bdda166d99e621fa3fc9e430c02725087b554ba3d346f3e01e7c5805e80

  • Size

    197KB

  • MD5

    c3472670ac3dad17f8a45321c31602c7

  • SHA1

    434d8e67eaae263a9a3801e1787aada8329b214a

  • SHA256

    9b808bdda166d99e621fa3fc9e430c02725087b554ba3d346f3e01e7c5805e80

  • SHA512

    8926570294b3109ca0882365d5988fb905c23b33ecb2254743fac4a9fd1ed4802a3e503d81cfd0605d937a1916596a5ebab757cad64e8ba4f5a0000f2f2bc935

  • SSDEEP

    3072:9tAvd2q6Z5nu//eu+7Idxd/wEDHF4pyt/Y7hj:NWldv/BDHF4pytY7hj

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://124.70.10.142:2222/Esp5

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; BOIE9;ENUS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9b808bdda166d99e621fa3fc9e430c02725087b554ba3d346f3e01e7c5805e80
    .exe windows:4 windows x64

    d31f0bc6d8a36658b0b5dbb1ef35ddd6


    Headers

    Imports

    Sections