Overview

overview

10

Static

static

10

f60a9a5910...0c.exe

windows7-x64

10

f60a9a5910...0c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f60a9a59101e4545d69a70a52d07b9036adddbec629454548a35efa978be480c

  • Size

    1.4MB

  • MD5

    013fc50fcecba03c8a50754b372fcb4e

  • SHA1

    2e55d2a0aed394f7ba3a565ddd2471521e65b35f

  • SHA256

    f60a9a59101e4545d69a70a52d07b9036adddbec629454548a35efa978be480c

  • SHA512

    70e64e7142ae853e0abd5ab731a82bff124f10f84d408d4e4d1c1e3b7bbcbe7a572b0d46c0eea71e257fefec437a18e7f662992a4e6654a073295c31a2075734

  • SSDEEP

    24576:k7Kq9lGTuIqA1iqzIuU3NKgezv+3V5aquwmLJ+BN84HvxPk:k9OuznOmc+3HCwmLM3tPK

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.110.100:8888/NOGy

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows Phone OS 7.5; Trident/5.0; IEMobile/9.0; LG; LG-E906)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f60a9a59101e4545d69a70a52d07b9036adddbec629454548a35efa978be480c
    .exe windows:6 windows x64

    4f2f006e2ecf7172ad368f8289dc96c1


    Headers

    Imports

    Sections