Overview

overview

10

Static

static

10

fb97e56b83...29.exe

windows7-x64

7

fb97e56b83...29.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb97e56b83c2c0b66bb2df45485a20c9b3523954fe47e31480c10e46d0d11b29

  • Size

    6.0MB

  • MD5

    95912856d003ce6a3d95c6d68f15c7ca

  • SHA1

    84a2b7bdf860e063d69fee1d0e81cba732e1f61c

  • SHA256

    fb97e56b83c2c0b66bb2df45485a20c9b3523954fe47e31480c10e46d0d11b29

  • SHA512

    b36611387317f1132168d7cc5c059fb6bd9b7824b3dd4027448790767c9e4ae59066f642f8a7202f1ff2da52af1e29ac2e9413ef979fa8588c93d8f362bcabac

  • SSDEEP

    98304:lyIFKEE+V7sF4awNNdtehFCS423GjQ/ggIDyWbP6HzYSpXqR8M7kzZJwuohwfhUt:lHF7lsFmvdsCS4njQthsiHzYSEz7kzZm

Score
10/10
pyinstallercobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.69.109:6666/Qb8r

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) LBBROWSER

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fb97e56b83c2c0b66bb2df45485a20c9b3523954fe47e31480c10e46d0d11b29
    .exe windows:5 windows x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • 基础.pyc