Overview

overview

10

Static

static

10

9040df582c...4c.exe

windows7-x64

10

9040df582c...4c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    9040df582c46f9ffec4f8223ec21f0f2e42dd1e4caa630f0b5d7c9b8de64a94c

  • Size

    11KB

  • MD5

    2a5b4a3dbb5ba61f5dac94acce57f317

  • SHA1

    6fb58e483f3ec2005a808dbf82eee652f8a5384e

  • SHA256

    9040df582c46f9ffec4f8223ec21f0f2e42dd1e4caa630f0b5d7c9b8de64a94c

  • SHA512

    d9ef8649b94fc6456758d7e05f32cddd08fd231f232342da7bf14118958be917518300af1b7a5bb0839d0de3749fea4c1d0e6c49e065e164fc4147bb4fe6508a

  • SSDEEP

    192:GmZQ6uUWPjey8J99DAXMf7GD3Q5tfMcd8Ceo5i0Y/:GgQ6uUKt8ygGD3dP0Y

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://101.33.221.102:8888/QMTk

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9040df582c46f9ffec4f8223ec21f0f2e42dd1e4caa630f0b5d7c9b8de64a94c
    .exe windows:6 windows x64

    0bbfda4b1ee22ddf5b8a6c601e272ff1


    Headers

    Imports

    Sections