Overview

overview

10

Static

static

10

aa31f8fbb1...72.exe

windows7-x64

1

aa31f8fbb1...72.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    aa31f8fbb15220c00dbdb45d066fabcf48912c4e4aa1a9647f1556f00289f572

  • Size

    1.3MB

  • MD5

    4338756205bcb6ad9b07912c511be948

  • SHA1

    e9173e4e11f3e9e237ded76ae7f0c82e1f17abd9

  • SHA256

    aa31f8fbb15220c00dbdb45d066fabcf48912c4e4aa1a9647f1556f00289f572

  • SHA512

    88f1929f3fc907f0e92be4467ba3427af6681d53c6b91ba12493804619eac4d42e2b01a6f4f10afb97b221c8cd75a84c6db07e1b46c785b8a3a1c8ffb8005806

  • SSDEEP

    12288:dQ6sulnVy5ZnGzx0tIRrcxnZaELWxtdv8rgURItbwSxJISUZc9zpDTlelh1SN:SuJVy5Zn6x0+qch8rgwItCZc9z5JeD1

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.159.145:8080/TO9ZiB/N8tEj8/login.html

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aa31f8fbb15220c00dbdb45d066fabcf48912c4e4aa1a9647f1556f00289f572
    .exe windows:6 windows x64

    9cbefe68f395e67356e2a5d8d1b285c0


    Headers

    Imports

    Sections