General

  • Target

    2023-08-25_6ced42e1ced9c54742168b9d81567faf_cobalt-strike_cobaltstrike_meterpreter_JC.exe

  • Size

    208KB

  • MD5

    6ced42e1ced9c54742168b9d81567faf

  • SHA1

    0e01580000f29dd1c3ad91167718ee01c1a927e8

  • SHA256

    6244c0fe705ac58d292199221d8f0ad86779d183294cf7b5ec567056b7773a6b

  • SHA512

    e8242d008af3df9ff618181dafaabdcdb0e3cab5227937dc4a8346a7217b91c532f5d38590fe7d0d58cf5734b717c6a0a631286b99404b0178237399781d5f34

  • SSDEEP

    3072:n6o6EBWBflAg5D8CCznxF4/68+ipD5XcFb4TN9pjVUPmY5Y:n6bflfN8CIxK/68+wD4b4TFj

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

Botnet

0

Attributes
  • watermark

    0

Signatures

  • Cobalt Strike reflective loader 1 IoCs

    Detects the reflective loader used by Cobalt Strike.

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-08-25_6ced42e1ced9c54742168b9d81567faf_cobalt-strike_cobaltstrike_meterpreter_JC.exe
    .dll windows:5 windows x86


    Headers

    Sections