Overview

overview

10

Static

static

10

b6eaf22029...d6.exe

windows7-x64

10

b6eaf22029...d6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b6eaf22029973ce5f32eb4ea63eb60e9af67b8024686e4aa21b6d7f9490438d6

  • Size

    62KB

  • MD5

    a81142a1f25b04b98e8b06b31521216c

  • SHA1

    21f70429a1a0fa91d88f94e6c4d951728c5cf209

  • SHA256

    b6eaf22029973ce5f32eb4ea63eb60e9af67b8024686e4aa21b6d7f9490438d6

  • SHA512

    d3df748c00caf330fcc46b7f5b27a9d99c397f9fc2b43d1647badbd9bf677e01f58b85c8de62b9fc12ab7a937e9c07bce5c7892b3d2b34935da69546adba9ec4

  • SSDEEP

    384:4GZUandBhyY/13SeTRYeXyQJKK9IAGkJAKcaFKoHNqdFRQfBp5wif38hilh+A89u:40ndTdbZyoIASK5KuNqd+Bdf3LlwA89

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.183.135:443/CVTp

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; BOIE9;ENUS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b6eaf22029973ce5f32eb4ea63eb60e9af67b8024686e4aa21b6d7f9490438d6
    .exe windows:6 windows x64

    a7b7e5df8555b3469dd55d0ce821a6e6


    Headers

    Imports

    Sections