Overview

overview

10

Static

static

10

34cb89467a...aa.exe

windows7-x64

1

34cb89467a...aa.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    34cb89467a1c3a00b873075fcfae71fe327896346a5470d0a1e05cb4215b9daa

  • Size

    128KB

  • MD5

    ac19736fa52f9c8d4fe51bd404ecfcd6

  • SHA1

    ffd094f5495981e41459755f8fecc7b8f1546c25

  • SHA256

    34cb89467a1c3a00b873075fcfae71fe327896346a5470d0a1e05cb4215b9daa

  • SHA512

    b9222f4e6e60471a651b0a39f2393a9a4f0eb8d1f0623e2b135a03354d1b5ea052bf67916afca4dc948516478dc899484590efe867a3f0e07bcaaa6d4938200b

  • SSDEEP

    384:97Jt/jRj/zFg05Wpl8/VtTsnIce92s4wGD1:99trJh2p6j1/2s4rD

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://107.151.246.157:7788/IVTj

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; BOIE9;ENUSMSE)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 34cb89467a1c3a00b873075fcfae71fe327896346a5470d0a1e05cb4215b9daa
    .exe windows:4 windows x64

    ca85b6618b1e1cad2f59872f180b38c6


    Headers

    Imports

    Sections