Overview

overview

10

Static

static

10

567bfce631...3e.exe

windows7-x64

10

567bfce631...3e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    567bfce631ea85c0ce5bc41e7cf76e79d6443177c7bc47e98d25306531e9e43e

  • Size

    198KB

  • MD5

    65e5ec3e874c25dcd96a96ef09284fc4

  • SHA1

    d6c2abbe2cdf013528bb0a75f65f778174911aa1

  • SHA256

    567bfce631ea85c0ce5bc41e7cf76e79d6443177c7bc47e98d25306531e9e43e

  • SHA512

    c46dcb99f4ddbd4d1b9d1ef8e392e3b397e05b9c39597b9c4971b174cf563bab841bcf5e7eb85a75da968f1a284bcf2dd6a3e24f1d94625fe5a95f632e105be8

  • SSDEEP

    3072:dpsvtE6PDprVgiOgSihV2Ic/XGmkvYF67om/:kFEsFrVgiObSVNVvYF67om/

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://158.247.240.30:18055/9Nim

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) LBBROWSER

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 567bfce631ea85c0ce5bc41e7cf76e79d6443177c7bc47e98d25306531e9e43e
    .exe windows:4 windows x64

    a188a2b9f0e88199620b7e73f14f05b9


    Headers

    Imports

    Sections