General

  • Target

    178b9eabc930ad6d3800f825fea5e7021b1b28fc91c380794a818654f3aed768

  • Size

    5.7MB

  • MD5

    aa7b61bd60587d9fc4be785674821539

  • SHA1

    f1bfa39013e35e1af91ee4f6297ca804d6aec569

  • SHA256

    178b9eabc930ad6d3800f825fea5e7021b1b28fc91c380794a818654f3aed768

  • SHA512

    fd45d21da8eb9be07b978266bb6e79aaa7e0c66d642addac1a03c6e679b94a0147691c4a657c9865731c40ac2c74c10e30fb17b353b69e060811a4561f80c722

  • SSDEEP

    24576:D47qyx18y5L5qWM1IXxUTa7WRZypwxr+cDBsKeKIJnqh4Vgn8Tj06v1A99VY9TSp:S81IybyCbKwMoQpV7KFYZ5m

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://driverstorage.firmware.keenetic.pro:443/Communicate/certenroll/LGKWDB7K

Attributes
  • user_agent

    Accept: text/html, application/xml, application/json Accept-Language: et Accept-Encoding: br, compress User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.0.4) Gecko/20100101 Firefox/4.0

Signatures

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 178b9eabc930ad6d3800f825fea5e7021b1b28fc91c380794a818654f3aed768
    .dll windows:6 windows x64

    f988c252512620600cf69969b84ebdc5


    Headers

    Imports

    Exports

    Sections