Overview

overview

10

Static

static

10

08c13828e9...06.exe

windows7-x64

10

08c13828e9...06.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    08c13828e92eccc966db008bf178091d5cdcad46ce26a821d93b3fbc3a71c806

  • Size

    147KB

  • MD5

    84457cb2318634a26647e9b60008d560

  • SHA1

    681731c9df54f1cf7e66285e50595609478f3edc

  • SHA256

    08c13828e92eccc966db008bf178091d5cdcad46ce26a821d93b3fbc3a71c806

  • SHA512

    9cf5fa5e61b4acb6180163dd98f07dae64ff4eb7c909cf5c094c85e5979aff8838f4ca9ba915c1f964f41567a3c5afe705618ea1aaa51f6d767ae88fcea79eef

  • SSDEEP

    3072:rX1YyDqd5V/WDBGHfASVqG9Vs1WqIGpxW+V:DcwyVMIGpx7

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://54.238.191.171:12345/n9pF

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; MDDCJS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 08c13828e92eccc966db008bf178091d5cdcad46ce26a821d93b3fbc3a71c806
    .exe windows:6 windows x64 arch:x64

    ebfc2ce3a8b881d8532804ba5a2358e2


    Headers

    Imports

    Sections