Overview

overview

10

Static

static

10

a7699c2bc9...5a.exe

windows7-x64

1

a7699c2bc9...5a.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    a7699c2bc9927068e03c5b9445b80b6c62e905e4cdb03672cc35e45e5961625a

  • Size

    490KB

  • MD5

    f2081422fba2cf484876ca4caf8f7d41

  • SHA1

    ccdb1237c767468015932569e3214a3a5d91a311

  • SHA256

    a7699c2bc9927068e03c5b9445b80b6c62e905e4cdb03672cc35e45e5961625a

  • SHA512

    b8fa515390ed9acc54afcee2595403ebbed0d9a1a4dec4b37f2165b1f1eddfc18fa9b63b921700db6d2a48ae2d23f3ad45f29d143fa4eda37660cbb0843f407e

  • SSDEEP

    12288:iOX5WYgeWYg955/155/nsgM52DU7Id45GKBgofy3tc:iO8ssd0nu

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://103.234.72.229:10212/5eN1bjq8AAUYm2zgoY3K/ll_9354efa.js

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 7.0; InfoPath.3;.NET CLR 3.1.40767; Trident/6.0; en-IN)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a7699c2bc9927068e03c5b9445b80b6c62e905e4cdb03672cc35e45e5961625a
    .exe windows:6 windows x64 arch:x64

    35aa3f0e720b15fbc9fbaba9d23094b8


    Headers

    Imports

    Sections