Overview

overview

10

Static

static

10

00eba65b60...e8.exe

windows7-x64

10

00eba65b60...e8.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    00eba65b60e0cf31688efe67ed338b5b300205f3d2b16a34130521f860611de8

  • Size

    53KB

  • MD5

    093f422c6f48e351f5a582366196ba46

  • SHA1

    0f70191c0083c1dcef285d2e23b41b6a509867e1

  • SHA256

    00eba65b60e0cf31688efe67ed338b5b300205f3d2b16a34130521f860611de8

  • SHA512

    7e8fa3e2113d223d67d6cae558aab75310c8a253ccfb000a5556d77d960157b6fb556be0a4ecba618e71ac8d72d9ebf9a6a0bf7726e71a4da36631bca6e7eba1

  • SSDEEP

    768:VaVar3h/Ug0s+1BNc/wTF8KPGNK2A/+iAQWYW+o:wAbh90s+1Lc/wh8KPGNKNHI

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.111.130:80/OQlQ

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; MALNJS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 00eba65b60e0cf31688efe67ed338b5b300205f3d2b16a34130521f860611de8
    .exe windows:4 windows x64 arch:x64

    aedeace88c22991329d77b4400b84512


    Headers

    Imports

    Sections