General

  • Target

    NEAS.2023-09-05_73842ac589ecb3601300e9147c90d3a2_cobalt-strike_cobaltstrike_meterpreter_JC.exe

  • Size

    234KB

  • MD5

    73842ac589ecb3601300e9147c90d3a2

  • SHA1

    09b4e0daf99db726d6b0dfda1bb0a556aadf8c85

  • SHA256

    b042981edde894918853a7a52673a7e232dc4f84f716ca58349ad65654e281ad

  • SHA512

    44b4e8504af3a3ce9db897977c76520756dcc8755ed9be2d2d3fc8d1909d922b7377b8429c9e0bd04abd1ab03d3a03712acee701f231333b4b702cbd170bd20d

  • SSDEEP

    3072:vIEp3QRn+eiCZHd9/tTSsgdISzK0Fn1ZksBs5+xxRVUpxEDCVj1UO955:vIEcnNiCZH5g+/0Fn1qsG5+TixEDyjv

Score
10/10

Malware Config

Signatures

  • Cobalt Strike reflective loader 1 IoCs

    Detects the reflective loader used by Cobalt Strike.

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NEAS.2023-09-05_73842ac589ecb3601300e9147c90d3a2_cobalt-strike_cobaltstrike_meterpreter_JC.exe
    .dll windows:5 windows x86


    Headers

    Sections