Overview

overview

10

Static

static

10

6424a39e28...af.exe

windows7-x64

10

6424a39e28...af.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6424a39e28b23c7e48d47ff161c42f7a547ced4b9594f2ef7eef71531b4c74af

  • Size

    1.1MB

  • MD5

    821bf8866d4334255fffac335cd64872

  • SHA1

    ce63929baed91782fe246f1f9b46c63f757113f0

  • SHA256

    6424a39e28b23c7e48d47ff161c42f7a547ced4b9594f2ef7eef71531b4c74af

  • SHA512

    2476e3e08485e1bf975741ee46f3cbbb49e867590e539abac6c7d25bff1f7ecffb00cd52e0ceb5850b16813c97fcbe706f013d92f8add1b84985847942335568

  • SSDEEP

    12288:YLvSKf6BiaixDrHZMLAMTRddB8dDiSca79Ow1VGIgGShiHla:YjSnBiaixDr5moEacwrhgnhiH

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://39.108.189.188:1111/w9y4

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6424a39e28b23c7e48d47ff161c42f7a547ced4b9594f2ef7eef71531b4c74af
    .exe windows:6 windows x64

    4f2f006e2ecf7172ad368f8289dc96c1


    Headers

    Imports

    Sections