Overview

overview

10

Static

static

10

076ae5855d...ed.exe

windows7-x64

10

076ae5855d...ed.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    076ae5855dd0b8aed1bed3d1f3a021891b901ae6661de4fb8bb13ce9b7d12ced

  • Size

    128KB

  • MD5

    e3dcabda61a77ac8bc183ef914ec9b48

  • SHA1

    a4d54d720aa6d80a9fd0baeac414c249c751f884

  • SHA256

    076ae5855dd0b8aed1bed3d1f3a021891b901ae6661de4fb8bb13ce9b7d12ced

  • SHA512

    35be3a3cac671ad7df7c98084f5a776f8c6c5e89d995e119b36511647a6bcd3291cf775a62344564210992320de9152c16d3285482f4ae4963619474e47227f6

  • SSDEEP

    1536:st6Xj2js4rYssyQmagXRc2DeWGkNFmv56AUvMFMQiNuRToRXQvWGQ7:OYyPuccDkNFmv56ofRkRXQ9Q7

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://118.24.128.43:80/VwFJ

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; MALNJS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 076ae5855dd0b8aed1bed3d1f3a021891b901ae6661de4fb8bb13ce9b7d12ced
    .exe windows:4 windows x64

    ca85b6618b1e1cad2f59872f180b38c6


    Headers

    Imports

    Sections