Overview

overview

10

Static

static

10

7563501469...8b.exe

windows7-x64

10

7563501469...8b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7563501469669ee1615b12c2c87f7bdd42da81bc9fb91385149715b9d8ad448b

  • Size

    12KB

  • MD5

    3b87b95ba11ad135dda660c33c076daf

  • SHA1

    d38540357b8133b8d69b7e188e0cccc0e60e911d

  • SHA256

    7563501469669ee1615b12c2c87f7bdd42da81bc9fb91385149715b9d8ad448b

  • SHA512

    2470cd64ffd44bb305b70a19c7f90a640883819a9f0a0b78e1fee0dc56b32b4bd2f33e2007f31ec195a4485f7dde6be48db3e2ee6cc27951fde90d8554dc38b9

  • SSDEEP

    192:PK6UtgHQFVlukmRwIBeZy4oWGIibrVAxW6s0ae3Q5tfwcSvW:FQXlupRwAgoNs13XvW

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.92.133:80/muD7

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows NT; DigExt; DTS Agent

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7563501469669ee1615b12c2c87f7bdd42da81bc9fb91385149715b9d8ad448b
    .exe windows:6 windows x64

    50c4a79d91c95f61f571583f8abcf651


    Headers

    Imports

    Sections