General
-
Target
2023-08-25_f80e919f6012f06048a6890363800bef_cobalt-strike_cobaltstrike_meterpreter_JC.exe
-
Size
248KB
-
MD5
f80e919f6012f06048a6890363800bef
-
SHA1
5d34a8279580c5b4b881e69f32866b1b8fc4319e
-
SHA256
0bc915cfe99160f57a9e401897d2a4227675ab29a732dba81f41d6c275827687
-
SHA512
a7227d6eb5a07bd43690147b9f630a58de6ee49e4c1a18d218d31199b28d1c128618671d9cd2a07f1b1b41f134ce6e3d4bb85032acdf318fab484cc3424c10d9
-
SSDEEP
3072:T8KWGFO8wfXmEl18CJSL7/IAqPaI9LX7F+h3uvzstjZU4Y5g:T8zfXlL8CG7ItPaII3uvzgj
Score
10/10
Malware Config
Signatures
-
Cobalt Strike reflective loader 1 IoCs
Detects the reflective loader used by Cobalt Strike.
-
Cobaltstrike family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
2023-08-25_f80e919f6012f06048a6890363800bef_cobalt-strike_cobaltstrike_meterpreter_JC.exe
Headers
Sections