Overview

overview

10

Static

static

10

acca57e373...80.exe

windows7-x64

10

acca57e373...80.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    acca57e373223816f10bba64967178b731c61a8c532f47659b69908c0b8b3080

  • Size

    12KB

  • MD5

    03c2093a02f75f3dba799fb22fb82715

  • SHA1

    d56a6098be7928125aee3cf0ee70c87c07988488

  • SHA256

    acca57e373223816f10bba64967178b731c61a8c532f47659b69908c0b8b3080

  • SHA512

    a703e3c87580deb1c88fda1fb508c6763dad125ead68d23b3a67605f538b0df906e7b7ca2e511f181b3b16a8aae1caf920286877a0d87b7f3577a51da1715844

  • SSDEEP

    192:Mg5C+QRau6hIUJe63ltO5OqH3Q5tfMc7jTJ:RQRaugIMVB23wjF

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.119.133:8666/Cov5

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; LEN2)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • acca57e373223816f10bba64967178b731c61a8c532f47659b69908c0b8b3080
    .exe windows:6 windows x64 arch:x64

    0bbfda4b1ee22ddf5b8a6c601e272ff1


    Headers

    Imports

    Sections