Overview

overview

10

Static

static

10

f0360e454f...fe.exe

windows7-x64

10

f0360e454f...fe.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f0360e454f9a7899175088fd4ed8a67034143a6e6d933d0539f06fe31be68cfe

  • Size

    53KB

  • MD5

    698cbb450d41f071b04f21d03e134a44

  • SHA1

    01b0e86f68b3d98593586f68a0a3164f87ccdd38

  • SHA256

    f0360e454f9a7899175088fd4ed8a67034143a6e6d933d0539f06fe31be68cfe

  • SHA512

    70d8204752acb8aa0ed6f36225a048a7aa0ba63e4029acd991429f02ad0904cfe6effe1216851d0ee8a291b20195d837634ad7f46c247d05abfad20194c00246

  • SSDEEP

    768:UObXTCA/o1VEHxFEg0s+1BNc/wTF8QPmP8L68rktY+T:UGlQ1Vexv0s+1Lc/wh8QPmERkJ

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.151.2:4433/jquery-3.3.2.slim.min.js

Attributes
  • user_agent

    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f0360e454f9a7899175088fd4ed8a67034143a6e6d933d0539f06fe31be68cfe
    .exe windows:4 windows x64 arch:x64

    20517f5146b66d2300bcbac82b941ba6


    Headers

    Imports

    Sections