Overview

overview

10

Static

static

10

3aafe88fbb...9b.exe

windows7-x64

10

3aafe88fbb...9b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3aafe88fbb161ac1aa709e1da8500143a86cd13e8032ddc28b317c3c30a5f99b

  • Size

    64KB

  • MD5

    4367d1042ee0d201ffd1e40754d4fd45

  • SHA1

    ede6f046165c8ed9248f1a9521386df3af701f05

  • SHA256

    3aafe88fbb161ac1aa709e1da8500143a86cd13e8032ddc28b317c3c30a5f99b

  • SHA512

    0274c714f49cc9e8f694cf3e64868eb928431795c68e95ea492991f61dc7d32fcf50f5c1acd5a7ab5accdd051bf6e7aa6916dcbc44dcbc89dd4b0d199302f2bb

  • SSDEEP

    768:3EXEziHr265yj3iEqgl5LUTEsBiVXyCPAZ9:3OE+Hr7UPqgkTEsBiVf

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://124.222.213.164:60044/JnZK

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MDDRJS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3aafe88fbb161ac1aa709e1da8500143a86cd13e8032ddc28b317c3c30a5f99b
    .exe windows:6 windows x64

    98286dc7fd6c1620759c1bf80bfbafdb


    Headers

    Imports

    Sections