General

  • Target

    2023-08-26_9f9f22ef0195c1903bfc635d7ef96c05_cobalt-strike_cobaltstrike_meterpreter_JC.exe

  • Size

    201KB

  • MD5

    9f9f22ef0195c1903bfc635d7ef96c05

  • SHA1

    f9bc0ffbc971fd2eb6c7aefa4d0808d211d8d924

  • SHA256

    96f01052c3cc213783e678af1c5ab2c7718366e8bdf41e265e13e0c334414ba2

  • SHA512

    575145d25774e715ba0a81517110587af890be5ee41116d8554d567055fba9f95f55e8212eec75bdea9e1336133d327a15d9042ced1b8ae6aa80afb15e7d9faf

  • SSDEEP

    3072:0FxsTnEfzEmyfyzwUTgnbiYJZ+bAbudMrxPtj1Um5:REffy6qbiYJZZjrxFj

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

Botnet

0

Attributes
  • watermark

    0

Signatures

  • Cobalt Strike reflective loader 1 IoCs

    Detects the reflective loader used by Cobalt Strike.

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-26_9f9f22ef0195c1903bfc635d7ef96c05_cobalt-strike_cobaltstrike_meterpreter_JC.exe
    .dll windows:5 windows x86


    Headers

    Sections