Overview

overview

10

Static

static

10

e70a103d71...55.dll

windows7-x64

1

e70a103d71...55.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    e70a103d71e92c978c4b33f57aa87705cc7205c99b5662d134c0f9f21bd64755

  • Size

    463KB

  • MD5

    cc6814c0552e7bb3d298bab8fc003ab9

  • SHA1

    96eec150427bc0584b2c4057502e5b24236f5ded

  • SHA256

    e70a103d71e92c978c4b33f57aa87705cc7205c99b5662d134c0f9f21bd64755

  • SHA512

    4a971784624637d398e8d41bda4cd8a5296f8c3c1f38653bd1600569e1583026cca898cf4819d3b44fb6bf45f88ce82abf027d7eb8ea2d970b23bf098ada73db

  • SSDEEP

    6144:FbsWsogfn57PODTXVYlQ8HhL6pG5igVyFTefwNwhJgqxUaFHDaJ+L3T8/ANohSHB:JsWjgPdG/lYybNwhJgWWJ/ANoszj

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.137.130:80/WENs

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e70a103d71e92c978c4b33f57aa87705cc7205c99b5662d134c0f9f21bd64755
    .dll windows:5 windows x64

    964e971be0b47c6eb66a6d25fcd62894


    Headers

    Imports

    Exports

    Sections