General

  • Target

    0c7cc87b3f5bed9efb0334538fb5bd3377b09fc09bedbbe7ecb9694379008286

  • Size

    889KB

  • MD5

    3b0137f65a04e2e8fa481e4f870c9034

  • SHA1

    7bbf348798fb13e69aab3f358876576af742ef33

  • SHA256

    0c7cc87b3f5bed9efb0334538fb5bd3377b09fc09bedbbe7ecb9694379008286

  • SHA512

    e086e34417e1591df2fca05f696a4b0f60243b1688fab22694691cb91a93612e04492b20ce51a84b48ec1034f71997cc29a0fe8ab9bce7a2737cfae552d64175

  • SSDEEP

    12288:RqOkE3e+1RyHDiiiuuviSeHHWC0hyXBnGKRLoQzYu6TloYpP7zYK:kS1RyHIeWC0hyXBnGKVD

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://110.41.174.148:443/6Net

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322)

Signatures

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0c7cc87b3f5bed9efb0334538fb5bd3377b09fc09bedbbe7ecb9694379008286
    .exe windows:6 windows x86

    042f21ab01bcf47551dcd2ae8ff43569


    Headers

    Imports

    Sections