General
-
Target
NEAS.2023-09-07_5a8d93c8c158c0a2f5386f2e374f59df_cobalt-strike_cobaltstrike_meterpreter_JC.exe
-
Size
204KB
-
MD5
5a8d93c8c158c0a2f5386f2e374f59df
-
SHA1
bfaa6da682f107f4b56d8d44f153498e989527d5
-
SHA256
8b00a3c63c7bdfae685783beb99f0d88726bfc85082253992d659febce8daaeb
-
SHA512
e845811f1834f64251b131ecc50bb52ee59396332fec0da6ed03b41c1e445c3732758ef0af2f729b23c797d6fe6889feae9f5f169c01e423f3e0bc7686501a88
-
SSDEEP
3072:iFna2JSkcrnYSdM50RAXSPy0qUiS0Lxh5H4evyzIhjQUNx5O:URYkcrY4MCIt07iPlvUYj4
Score
10/10
Malware Config
Signatures
-
Cobalt Strike reflective loader 1 IoCs
Detects the reflective loader used by Cobalt Strike.
-
Cobaltstrike family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
NEAS.2023-09-07_5a8d93c8c158c0a2f5386f2e374f59df_cobalt-strike_cobaltstrike_meterpreter_JC.exe
Headers
Sections