General

  • Target

    1e9e313fbfbcb2c391c8bb8732790396ece81587944ffd829b3fc1d7733b39cc

  • Size

    110KB

  • MD5

    83d2d38054392486a19df8e956ba7c53

  • SHA1

    210fbf137c03615cc33b34bf6a1943ad1201b280

  • SHA256

    1e9e313fbfbcb2c391c8bb8732790396ece81587944ffd829b3fc1d7733b39cc

  • SHA512

    2c7e0c230ecf74fd00a241919689ba9ae3d4d48c7f879c2885911f0a179549fc5ccaa8beb7fadccfc1d742b61fbe460211e75ca50bbf5c1aa2b5ed0f7a19094b

  • SSDEEP

    1536:oNmwHfH0SqhYouQSVzlflSPJaSACePVLzZwcFEzsWTdw9dlHSORcb:oNmw/RRNvluJZAz9LzWiEbAoORc

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://121.5.22.133:21786/hY4h

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322)

Signatures

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1e9e313fbfbcb2c391c8bb8732790396ece81587944ffd829b3fc1d7733b39cc
    .dll windows:6 windows x64

    b80f9a3caeabbd97ef3418216ac93c69


    Headers

    Imports

    Exports

    Sections