General

  • Target

    2023-08-25_9439375962c3541cd017260fd7afa2f1_cobalt-strike_cobaltstrike_meterpreter_JC.exe

  • Size

    206KB

  • MD5

    9439375962c3541cd017260fd7afa2f1

  • SHA1

    b780f607c6debe4b88cbfd9a2b8a6e48c65559b3

  • SHA256

    193c31073854609266bc2fbc70c14cc4f2b4015657313c23cd3f6f85e72a747f

  • SHA512

    a703d3ec7d394cc0488acbfd009f58eac9b894f79f4b58ea3d31005ea5e77f7712cf2cea10742374ca9e85d7270f0accc24dd425825af8169c4c4f48b4aebffc

  • SSDEEP

    3072:CWGpJ3XuOHupElvI8CE5TbSes2qqsQbpyFLcEwlzhyN5j1UU5Es:CtXuIu4A8CkTme3VVEBAlzUTjF

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

Botnet

0

Attributes
  • watermark

    0

Signatures

  • Cobalt Strike reflective loader 1 IoCs

    Detects the reflective loader used by Cobalt Strike.

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-25_9439375962c3541cd017260fd7afa2f1_cobalt-strike_cobaltstrike_meterpreter_JC.exe
    .dll windows:5 windows x86


    Headers

    Sections