General

  • Target

    da299be7f0cc9d71cdea150c0951dd6e4b121b65882a5bf2826f59dd02ea0ab5.exe

  • Size

    110KB

  • MD5

    a771d34f0efa34761d3a18371bc9655b

  • SHA1

    05b6e192978b27ea1a7ee5ed4e3e1d24939d13e8

  • SHA256

    da299be7f0cc9d71cdea150c0951dd6e4b121b65882a5bf2826f59dd02ea0ab5

  • SHA512

    50a9afb786616860d5c01bb03c6cbbb1af444fd986fc7e14055e1ee2875bc680a488d015d995627802800a85d5bb7229ee9d109777e3dacfa8360369b69d17cf

  • SSDEEP

    1536:pDet0y4S/xry1STK1HT5SnwerPJFwcINaocFEzsWTdg9dltEeKRUpQ:9et0Iy1DB5aw4PLfIN1iEbQXEeKRUp

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://121.5.22.133:21786/hY4h

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322)

Signatures

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • da299be7f0cc9d71cdea150c0951dd6e4b121b65882a5bf2826f59dd02ea0ab5.exe
    .dll windows:6 windows x64

    b80f9a3caeabbd97ef3418216ac93c69


    Headers

    Imports

    Exports

    Sections