Overview

overview

10

Static

static

10

8f20b8406a...d5.exe

windows7-x64

1

8f20b8406a...d5.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8f20b8406a7cb02fc229f68d9095730ccc772fe6cf710cb87f4b278a1d9f51d5

  • Size

    137KB

  • MD5

    20ce90e0f6fb4f1ff55cbfe3cd99e484

  • SHA1

    164b7e1a834a590d6306d2c4f47c001161fa450b

  • SHA256

    8f20b8406a7cb02fc229f68d9095730ccc772fe6cf710cb87f4b278a1d9f51d5

  • SHA512

    5cc1d065337cd77e3b213f62a5fc2a80d9b8dd0a68fd2fc61b6ec366f27fd2aea76af5ec51dac1f085b739f92c0a1a95b890d8aca6461ac406e74dfc63fabb0c

  • SSDEEP

    3072:TC6QP/pvcfOkQ8eXT9LvcxpcaCgrAgq0SzLzW:ePRvUJXSCxpcaUJG

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.119.129:87/2/events/com.amazon.csm.csa.prod

Attributes
  • user_agent

    Accept: */* Accept-Language: en-US,en;q=0.5 Connection: close User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; BOIE8;ENUS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8f20b8406a7cb02fc229f68d9095730ccc772fe6cf710cb87f4b278a1d9f51d5
    .exe windows:6 windows x64

    9875813f574d803ccc7d0df319db0a55


    Headers

    Imports

    Sections