Overview

overview

10

Static

static

10

aa0f8041cf...c9.exe

windows7-x64

1

aa0f8041cf...c9.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aa0f8041cf034e44ab8125a5c53c80e2506dd644fe931bbdda1b52d736d415c9

  • Size

    1.3MB

  • MD5

    26c778e5887da0462336bd6c72574ab0

  • SHA1

    bd779280aca8683ea52152d2634a855d5736c772

  • SHA256

    aa0f8041cf034e44ab8125a5c53c80e2506dd644fe931bbdda1b52d736d415c9

  • SHA512

    fa17f6357988dcc503253948e1ba9668c736c035a671c1bccbad84c7fdae108aacd2f87b4c79d0a781feae43aa6c51849d41189426bc387a5f8aeb155cfc94ed

  • SSDEEP

    12288:sQ6sulnVy5ZPGzxVtIRbcxXZakLWxtdv8rgURItbwSxJISUZV9zpDTFalh1TN:DuJVy5ZP6xV+ysh8rgwItCZV9z5haD1

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.159.145:8080/TO9ZiB/N8tEj8/login.html

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aa0f8041cf034e44ab8125a5c53c80e2506dd644fe931bbdda1b52d736d415c9
    .exe windows:6 windows x64

    9cbefe68f395e67356e2a5d8d1b285c0


    Headers

    Imports

    Sections