General

  • Target

    2023-08-25_b6d6b86ed3f04dda1135765d0af0bff0_cobalt-strike_cobaltstrike_meterpreter_JC.exe

  • Size

    208KB

  • MD5

    b6d6b86ed3f04dda1135765d0af0bff0

  • SHA1

    ddaa980a88e3bad9219e6f7ba0af0b0d310e9dbf

  • SHA256

    0d6b70847a139f52e05ed3afb17e00082bdfe00735d868bb07968ecd804107a2

  • SHA512

    3d5d4c25a7554b560f77ba986ce1a976480bb86d2ab9e7f105d63c7abb0adca94759be177788d4efb174a2e1622c9f14f10fd19fe44066e64068cb2ee1d493be

  • SSDEEP

    3072:iI/7mpBrEzfoU9lrQ8CzTXFEd2QGzHRQSvnDFPTf/Rj1UEY50Xa:t/vfo+lE8CzTOd2QGzHRlFPThjF

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

Botnet

0

Attributes
  • watermark

    0

Signatures

  • Cobalt Strike reflective loader 1 IoCs

    Detects the reflective loader used by Cobalt Strike.

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-25_b6d6b86ed3f04dda1135765d0af0bff0_cobalt-strike_cobaltstrike_meterpreter_JC.exe
    .dll windows:5 windows x86


    Headers

    Sections