Overview

overview

10

Static

static

10

065d9af0f8...e2.exe

windows7-x64

1

065d9af0f8...e2.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    065d9af0f8066b99c6c1ab50415f61995c0f09a7624d4b845862acd6082340e2

  • Size

    15KB

  • MD5

    789601462aee49aba7142bb5785ce169

  • SHA1

    70b85e47605cc9802ab6964f80f3d5529520d924

  • SHA256

    065d9af0f8066b99c6c1ab50415f61995c0f09a7624d4b845862acd6082340e2

  • SHA512

    f163214cd306ff2b511ccb0144e8836e8683f517d8e1a71e498fd30f4abe67cd51d110be87191f1bbd36b53a9745a7870d5cc6130a80a0de815172019fc813dc

  • SSDEEP

    192:JjV+uxJq+EX6aiYcC6vsyFWtRe0xH14Yhw/TEq3Q5Xf/r8MMS3NSt:5V+uax6aiYcC6vsyFWTH7C4q30MS9

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.32.138:3449/PQkQ

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; Touch)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 065d9af0f8066b99c6c1ab50415f61995c0f09a7624d4b845862acd6082340e2
    .exe windows:6 windows x64

    8277f1e2beb6214a4d29faaad2b455a0


    Headers

    Imports

    Sections