Overview

overview

10

Static

static

10

59c8d160b4...c1.exe

windows7-x64

10

59c8d160b4...c1.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    59c8d160b4300d59965dfaf37c5e43a60cd95a33650a7b766aab223c925afec1

  • Size

    63KB

  • MD5

    5a651751768fe378e117f391c691edfd

  • SHA1

    8ad7b03c70c2f8058c29d3c4bb37b34b3e587083

  • SHA256

    59c8d160b4300d59965dfaf37c5e43a60cd95a33650a7b766aab223c925afec1

  • SHA512

    f7edb5e0d65027065a98c6d5b4f4af4526e266cac944b7c6f227bb385d5a6ded48f2a388830f2855b4442643a18ede0981bf639408894e86d3130e1acb1355d6

  • SSDEEP

    384:4J3razYGyy/yK9+seTFFFWyPZE6zr5IHbFxPNKWYSDHxbwUGQfB54G8daGf/A89u:gmMGyyg4ydKHbRXYuBwUfBlGf/A89u

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://103.207.166.75:1397/HVYf

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 59c8d160b4300d59965dfaf37c5e43a60cd95a33650a7b766aab223c925afec1
    .exe windows:6 windows x64

    3aaf86a5f2859ccac8e535f903f96838


    Headers

    Imports

    Sections