Overview

overview

10

Static

static

10

5ef1685ac6...9b.exe

windows7-x64

1

5ef1685ac6...9b.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    5ef1685ac6b4cb76783d777ac34fb2464b520d2bf9cb536acb70b790c2ebf59b

  • Size

    537KB

  • MD5

    644f5379c63e9c21b145bf0ae06a33d5

  • SHA1

    22c77b10c9646cd459841a6882b617b6bee15bf6

  • SHA256

    5ef1685ac6b4cb76783d777ac34fb2464b520d2bf9cb536acb70b790c2ebf59b

  • SHA512

    d6ba96ebe0a3fdf6b7a57675b8d9740ccbcdce51c771c6b59783aa2a1d83c46c52b367e8959ed644106692be14630ab96c113a379834093120f4af82320af499

  • SSDEEP

    12288:bxu1wMElzBcNYlqzvVYoyu7qViXhzLYgkBQoAp:bxmwMuzKpvVY/AJLYx+

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://124.220.235.65:1666/D9uk

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; MALC)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5ef1685ac6b4cb76783d777ac34fb2464b520d2bf9cb536acb70b790c2ebf59b
    .exe windows:6 windows x64

    dbb105477902851b5b04b1eb54bf14c5


    Headers

    Imports

    Sections