Overview

overview

10

Static

static

10

1c46b4ee32...c9.exe

windows7-x64

1c46b4ee32...c9.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    1c46b4ee32832014d5ee6d14a16d28334faafd216d01ecd2a058e6038ca7aac9

  • Size

    31KB

  • MD5

    247e79bb3ee51f1f25fc9810fd95237b

  • SHA1

    9deefd2d37dd1a33a33f7c6bc38a609f9fe1b1ea

  • SHA256

    1c46b4ee32832014d5ee6d14a16d28334faafd216d01ecd2a058e6038ca7aac9

  • SHA512

    9041e113759fdf22e3d63aade2993193434649d8f8d78e3a909f29e3ef26b633b0bc5bec44f5875cc76960eea3b1570a384df8a8ce05fd06b1052c4df33b735f

  • SSDEEP

    384:cAP+Fbgi05lIeiJrXbq5LM3NOn6vrwUbjj7r0raZutbM0sIB6:cAIgvSX6KNsU7kr

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.8.112:443/ukJ3

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible, MSIE 11, Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1c46b4ee32832014d5ee6d14a16d28334faafd216d01ecd2a058e6038ca7aac9
    .exe windows:5 windows x86

    ae463a7987e8eb70dbf6d1053c848048


    Headers

    Imports

    Sections