Overview

overview

10

Static

static

10

da299be7f0...b5.dll

windows7-x64

10

da299be7f0...b5.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a771d34f0efa34761d3a18371bc9655b.bin

  • Size

    56KB

  • MD5

    bbf5f0b697d98c670014777263ba3776

  • SHA1

    19ca42a40cda49d3d79c75bd6f88d87272c4b68f

  • SHA256

    e04773ed39d436bcd46a7d40397aa4d75d3ff0d794c5e45772186ab2da0c5b90

  • SHA512

    d6bd8ef3fa67bfc2d542a8206d080d930bda3ad6c512dae186fc332222d8d65e703eae45fecc519fe9f29808a10485de1eddb4dcf843dda7fcfbbe66f1f855a2

  • SSDEEP

    1536:TUlF7jmephfaDQIjAK4DGATCkrjqi3MkLkUR2GP2:TUl1TplasbyATC6eivgGP2

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://121.5.22.133:21786/hY4h

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a771d34f0efa34761d3a18371bc9655b.bin
    .zip

    Password: infected

  • da299be7f0cc9d71cdea150c0951dd6e4b121b65882a5bf2826f59dd02ea0ab5.exe
    .dll windows:6 windows x64

    b80f9a3caeabbd97ef3418216ac93c69


    Headers

    Imports

    Exports

    Sections