General
-
Target
NEAS.2023-09-05_64e1929feefdf7ee78dac024d1ea8d23_cobalt-strike_cobaltstrike_meterpreter_JC.exe
-
Size
276KB
-
MD5
64e1929feefdf7ee78dac024d1ea8d23
-
SHA1
6c8bf4ad22c868b2c420d2222f41ad2df575a157
-
SHA256
1c87713ff9f101f0018aefd8e4a8dadd73afa1449b2af7aebe6eff6ec375bfe6
-
SHA512
c33e76e026a4c90017f8c3e2c0b1d6c09f83a3caf4037f76240f9eda5bf8c566012000f75d19805e000842abb383f14579183d44a85b47c9b5959a5fc2aa406f
-
SSDEEP
3072:QPgiRSRGtJY5Yzqptcxxvbd0Py0R8lz7JlWIIhkZE72g2j1Ud59H:QTiWeptwRm60R8AIq72Tju
Score
10/10
Malware Config
Signatures
-
Cobalt Strike reflective loader 1 IoCs
Detects the reflective loader used by Cobalt Strike.
-
Cobaltstrike family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
NEAS.2023-09-05_64e1929feefdf7ee78dac024d1ea8d23_cobalt-strike_cobaltstrike_meterpreter_JC.exe
Headers
Sections