Overview

overview

10

Static

static

10

84c889ce90...e7.exe

windows7-x64

1

84c889ce90...e7.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    84c889ce90724de4bf145da81131ed4f0e51c32561eb6770cc299e6e76c32ce7

  • Size

    1.9MB

  • MD5

    dc02bcb263bdeff1c5eca78a3b02c627

  • SHA1

    a5763b097ab44fd91fb6fc99422e49d36a781ed1

  • SHA256

    84c889ce90724de4bf145da81131ed4f0e51c32561eb6770cc299e6e76c32ce7

  • SHA512

    c552a54cb1b575adab52c10f307a9c6f7b17db2084f40503424061c57f4a9f307643161dfe65e3ecfa1344ee6741bee567da7e0033d6bc68f65d574265f48fdf

  • SSDEEP

    49152:auJV4ZPWi9gwIwv+D1PvX3nTbqfc/0fJ935miRn:0ZOr3nTupfbZ

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.159.145:8080/TO9ZiB/N8tEj8/login.html

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 84c889ce90724de4bf145da81131ed4f0e51c32561eb6770cc299e6e76c32ce7
    .exe windows:6 windows x64

    9cbefe68f395e67356e2a5d8d1b285c0


    Headers

    Imports

    Sections