Overview

overview

10

Static

static

10

866214edb3...0c.exe

windows7-x64

1

866214edb3...0c.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    866214edb319a8530343c5cb44af325583bdedca36f3654d6682f88dc7d5420c

  • Size

    146KB

  • MD5

    6b34f42c9745c060cf484b7bccb13481

  • SHA1

    ba14114602e14a3ac5fde011d8d6be2a3df41460

  • SHA256

    866214edb319a8530343c5cb44af325583bdedca36f3654d6682f88dc7d5420c

  • SHA512

    b4036eb5fe368bde4233e93020220f9eab02d8b71bda2d5bb8c273a8ffb00e917a1987eba1ad98895b8fe8d55ed3f8daaa4f4e956faece5a02c9ccf848c1b81e

  • SSDEEP

    3072:Jl2eyA3LM+RdsFnZEoISVhV9sRjMcSohw1i:nfoWsl5VnCF

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://54.238.191.171:12345/n9pF

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; MDDCJS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 866214edb319a8530343c5cb44af325583bdedca36f3654d6682f88dc7d5420c
    .exe windows:6 windows x64 arch:x64

    1673c5ae7a80bd4e507e06b03924e688


    Headers

    Imports

    Sections