Overview

overview

10

Static

static

10

89897db60a...13.exe

windows7-x64

10

89897db60a...13.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    89897db60a00c8f642e387e3d70bca678f454a28c7ad1c64133875f0f6098913

  • Size

    40KB

  • MD5

    601dd398c3ac3322378af9ba68567236

  • SHA1

    8557745bbb37087a90deee0f3bd054bd06edb1ec

  • SHA256

    89897db60a00c8f642e387e3d70bca678f454a28c7ad1c64133875f0f6098913

  • SHA512

    88da58773ab691cb118ae934e935c8441a73112a2292118a76a8f053d8f8e6cf252ece1a25a29e7171bcdc8550e9a4a5f996373776e9d4e4a091e404540ff525

  • SSDEEP

    384:7UDp6EBKOhHYzaI4GS1dBgEBfriiNJBaxIHVbPeuaBU3losjuzZ6UwYRGZqy7wTO:u6EBt4WtNNWCPP3lLuzZPKqTE4fp4d

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.119.133:80/1mUj

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MASP)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 89897db60a00c8f642e387e3d70bca678f454a28c7ad1c64133875f0f6098913
    .exe windows:4 windows x86

    a839a3a88d63510bcb7e2dcdddf17765


    Headers

    Imports

    Sections