General

  • Target

    811eeb5dd66563d1fed3b3ee704ae46e844edd1c6e371cfefb24732d5d218d8a

  • Size

    66KB

  • MD5

    a1d13dcb4d0da48c4362cecea908a2cc

  • SHA1

    b9a838ba0f71d1ee8e95d57d449f9ef65aef0cc8

  • SHA256

    811eeb5dd66563d1fed3b3ee704ae46e844edd1c6e371cfefb24732d5d218d8a

  • SHA512

    e3c6fc59c4cf5d8cdb3fcfff05088bbeddf0b41b933e35b16e1aa3a58e817aa2646a35d7a80c1548e2f85988997f234f7694cd6a059ab576ba27e5b7e0045a0e

  • SSDEEP

    384:yFCao9xJt7ZaLak8KiIT1Yz4bBEa8AIG83eVyyLMDHoCk1gQfBDawdpqAhcO:YobBkG+YMbBEvGUCMr5k/BxPqA

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://service-9ghhu8y3-1304139590.bj.apigw.tencentcs.com:80:80/Rpc

Attributes
  • user_agent

    Accept: */* User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 7.0; InfoPath.3; .NET CLR 3.1.40767; Trident/6.0; en-IN)

Signatures

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 811eeb5dd66563d1fed3b3ee704ae46e844edd1c6e371cfefb24732d5d218d8a
    .dll windows:6 windows x64

    be0919785731a75acd4ccabd6745015f


    Headers

    Imports

    Exports

    Sections