General

  • Target

    692e6e01e930a813ec3402ecdf95f2e4be143738a1b57d3a6b55237a14849b76

  • Size

    60KB

  • MD5

    99bd2ba2c676adcb07cb5b67412a5b87

  • SHA1

    714621bd3eaa32bcc4b978f15e77b4df97146186

  • SHA256

    692e6e01e930a813ec3402ecdf95f2e4be143738a1b57d3a6b55237a14849b76

  • SHA512

    9edc97c299c21c26ca3bc4290c72819c6e0b4895fb937d4f67877a352446494818fb0670cfcca33e75637d96a7b4dc5e6124e854ac00e1980e1b3544ef70ca45

  • SSDEEP

    384:XzaBE5RHXfGGheeETeuixbR8hyIdNW9XY/dC4mQ7biEHlbP/A15fQfBkEpjh/V/i:XuBNeXu8bRedNWQl3iylc7uBZntaA

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://47.98.20.26:443/n4hS

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; MATMJS)

Signatures

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 692e6e01e930a813ec3402ecdf95f2e4be143738a1b57d3a6b55237a14849b76
    .dll windows:6 windows x64

    5f267262032443ffcc7fe08a2c51e09b


    Headers

    Imports

    Sections