Overview

overview

10

Static

static

10

e464228b96...42.exe

windows7-x64

1

e464228b96...42.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    e464228b96b78269a58e8af306dd96793c717012134252e0bb70a5a6bf1a7842

  • Size

    490KB

  • MD5

    6fa1d8c9fee9360146603d6ada87230a

  • SHA1

    d77c9c882c09e15df0cb71e49415ac33314b32d9

  • SHA256

    e464228b96b78269a58e8af306dd96793c717012134252e0bb70a5a6bf1a7842

  • SHA512

    2f6dcbc73ee3f5512b712d4f5ba2ee83747b95c7398d927107242c9bb00d30c9b1639c7f48dee23c0ff917d471d381029c4c2cbd808d7b022ff96ef321b3e90e

  • SSDEEP

    12288:FOX5WYgeWYg955/155/nsgM52DU7Id45GKBgoHy3tH:FO8ssd0nu

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://103.234.72.229:10212/5eN1bjq8AAUYm2zgoY3K/ll_9354efa.js

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 7.0; InfoPath.3;.NET CLR 3.1.40767; Trident/6.0; en-IN)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e464228b96b78269a58e8af306dd96793c717012134252e0bb70a5a6bf1a7842
    .exe windows:6 windows x64 arch:x64

    35aa3f0e720b15fbc9fbaba9d23094b8


    Headers

    Imports

    Sections