Overview

overview

10

Static

static

10

cb946cdbe2...bd.exe

windows7-x64

10

cb946cdbe2...bd.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cb946cdbe2f67cfcdbf9d69c2339b1998add5b17a98567b7dbfc501a423ef5bd

  • Size

    147KB

  • MD5

    b2243f9694c52b1dee21ee71c69cb991

  • SHA1

    0def6900a4827439617db2a5990fe3c11545c549

  • SHA256

    cb946cdbe2f67cfcdbf9d69c2339b1998add5b17a98567b7dbfc501a423ef5bd

  • SHA512

    dae439cef0e6e41b03ecd2b3a955787d9cab45f639edd43ec318ddfdd31d86d2d146f9f26ec56d88e3d41cbaf7cce78b1827c825e14979b8c41b7f5826ea6409

  • SSDEEP

    1536:OPSdFZysjPWJFmwMR2zuMgipUNhqyaJq7tgoSaqlPLZ9tdDzZNpnSgWukEPH201l:OPEZyuPWnx5zu7ZSa4Z9nFHSn5yWKaS

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://54.238.191.171:12345/n9pF

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; MDDCJS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cb946cdbe2f67cfcdbf9d69c2339b1998add5b17a98567b7dbfc501a423ef5bd
    .exe windows:6 windows x64 arch:x64

    a7b82078416cd38e1e4b5adeea67d5dc


    Headers

    Imports

    Sections