General

  • Target

    4f8662f36771adce6692ba847e689b4bf9829423197d4b829fd440032923b82c

  • Size

    12KB

  • MD5

    215f707f35ad978506db547853671654

  • SHA1

    e73f338579eebbbe0bb46d17ab6c80a309bda4ed

  • SHA256

    4f8662f36771adce6692ba847e689b4bf9829423197d4b829fd440032923b82c

  • SHA512

    c0efe89252d4d5dd69a274a0275a626a5e28462434dfe7150bd71d0bf6940bf19368a236acd3d33daf69f7953a7bcc08c4487e658ed9e62bafe9b4fc5fc89886

  • SSDEEP

    192:/g5C+QRau6hIUJe63ltOsOqH3Q5tfMc7jTJ:YQRaugIMVu23wjF

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.119.133:8666/Cov5

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; LEN2)

Signatures

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4f8662f36771adce6692ba847e689b4bf9829423197d4b829fd440032923b82c
    .exe windows:6 windows x64

    0bbfda4b1ee22ddf5b8a6c601e272ff1


    Headers

    Imports

    Sections