Overview

overview

10

Static

static

10

2789468629...e0.exe

windows7-x64

1

2789468629...e0.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    27894686297e6b17f74148934d3895ecf53cd3c12b3e3eeedd0ae663200c1ee0

  • Size

    484KB

  • MD5

    14611e047afaf225901842225249f948

  • SHA1

    a2cf0daaba30ae6c5c970f0fd4e60bf4cbb397a2

  • SHA256

    27894686297e6b17f74148934d3895ecf53cd3c12b3e3eeedd0ae663200c1ee0

  • SHA512

    72b4ec5f7a3486ef754a0950b1845842e53044ed204e2f64cbaf7981bff92cb101a33cc948407d03c2a5b3874caee9c17257be75fb58f975ba61480ea38f7aff

  • SSDEEP

    12288:yqI42WYgeWYg955/155/N5q6wj86E692+GXhCLM7YoYc4:DIc5BwN21XsLNVn

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://103.234.72.229:10212/5eN1bjq8AAUYm2zgoY3K/ll_9354efa.js

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 7.0; InfoPath.3;.NET CLR 3.1.40767; Trident/6.0; en-IN)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 27894686297e6b17f74148934d3895ecf53cd3c12b3e3eeedd0ae663200c1ee0
    .exe windows:6 windows x64 arch:x64

    35aa3f0e720b15fbc9fbaba9d23094b8


    Headers

    Imports

    Sections