Overview

overview

10

Static

static

10

a440703e72...93.exe

windows7-x64

1

a440703e72...93.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    a440703e72b9e77d83ecd73d04250d54716dd58c69482e7508ae2fa3d4b47d93

  • Size

    45KB

  • MD5

    7fc86fff899151673d83181a7f9b06fd

  • SHA1

    093cea4994e689505709afadc3b7af639c80f3ab

  • SHA256

    a440703e72b9e77d83ecd73d04250d54716dd58c69482e7508ae2fa3d4b47d93

  • SHA512

    b31d94774d9fd69a0270986e7ce1d2a3c7fc38d56ab30a7d2f3c3b0bfbe091cff6603210853b79be026b30737a644903a38f1da574da3b3377f4e2f36d62ae19

  • SSDEEP

    384:aK6Es0Fovo+rJYBwBFyn9j25PS7nw/ccj3kfsqQ3XVi6kJqMAPWiRX:PM1rJ+R9j25PAnKc2kfsq4U6kJGW4X

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://120.48.58.156:808/ONoQ

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0; BOIE9;ENUSMSNIP)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a440703e72b9e77d83ecd73d04250d54716dd58c69482e7508ae2fa3d4b47d93
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections