Overview

overview

10

Static

static

10

7c37ddb681...a7.exe

windows7-x64

7

7c37ddb681...a7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7c37ddb6810b96cd49904d863e528a2c062da64e055349b2f3687ed56aebe5a7

  • Size

    7.0MB

  • MD5

    6d616ae223cd6f7744d1a329fc9a3833

  • SHA1

    c810ec045be87ff0ebcc19c08d14eee9dbd6af08

  • SHA256

    7c37ddb6810b96cd49904d863e528a2c062da64e055349b2f3687ed56aebe5a7

  • SHA512

    35399f93dcb9713410d67066bb6b7e74f80d57e838f47628974f4dde3aacad511c23403cf7bc00f0348223697730ad30e0528c4b72e620a6af068ff8995c3013

  • SSDEEP

    196608:c9oe1W903eV4Q2tpDjIIAcwD0RP0vvk9LIL:tEW+eGQi9jo0hk

Score
10/10
pyinstallercobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://10.0.0.116:8066/qGUP

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; .NET4.0C)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7c37ddb6810b96cd49904d863e528a2c062da64e055349b2f3687ed56aebe5a7
    .exe windows:5 windows x64

    20d446c1cb128febd23deb17efb67cf6


    Headers

    Imports

    Sections

  • t1.pyc