Overview

overview

10

Static

static

10

a9967d10e7...4c.exe

windows7-x64

10

a9967d10e7...4c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a9967d10e7c4807d59dd5c5a49019780a4fc24ffcb53a7c1fe213ba0f5ceaf4c

  • Size

    6.4MB

  • MD5

    b1ba1848a8337c1d7dbaee35e6e79672

  • SHA1

    26a8f43a18b0a6e578064bfb3c55b074bf2a04bf

  • SHA256

    a9967d10e7c4807d59dd5c5a49019780a4fc24ffcb53a7c1fe213ba0f5ceaf4c

  • SHA512

    ef322c73cd6d68605fe62a41858119e0eaca52f86e5aba3eaebc7e7729ef2f8aca829ded0ad5659f8136e70d9e8d89a51983b1e565729dd1005d79a421ee8378

  • SSDEEP

    196608:DIKOLa9onJ5hrZERVM+ENFJzFcguwWFLyW1/A:0G9c5hlERVMRFJzFcgupF+Y

Score
10/10
pyinstallercobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.126.130:89/ulK1

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MALC)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a9967d10e7c4807d59dd5c5a49019780a4fc24ffcb53a7c1fe213ba0f5ceaf4c
    .exe windows:5 windows x64

    d170e2e5adcfc4c271f2eb78a565305e


    Headers

    Imports

    Sections

  • atr.pyc