General

  • Target

    c208f9d7cca220960224db4b51bf8ab369a33446a31c594f6f07afb484c26a6d

  • Size

    26KB

  • MD5

    e825993e4503f91ce92a38ab8209afc1

  • SHA1

    8d5a1a4f9c5f11dad90e2c8d368cf71b3be45c34

  • SHA256

    c208f9d7cca220960224db4b51bf8ab369a33446a31c594f6f07afb484c26a6d

  • SHA512

    8f83ca15dff6ea0d61761e5dd3e315ca521d39ef974b2cc0fa4da5e4dc8ce12b52f51b752117d8080e3b25542c0327a30c6c64dc269c56ac54eb39e2b5bf3e14

  • SSDEEP

    192:j+ZkYNitWU915I4qkfxnJyNJxcM9EGz4QbNDa26QZjomcy9U2j0EtXDG0htycvVX:jyiJ7fLAJptbU26QZjom9U2j0Ejt1X

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://120.78.217.180:50002/W6xX

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.3; .NET CLR 2.0.50727)

Signatures

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c208f9d7cca220960224db4b51bf8ab369a33446a31c594f6f07afb484c26a6d
    .dll windows:6 windows x64 arch:x64

    1704b3bc8129470e5e1adfcf0eeaf618


    Headers

    Imports

    Exports

    Sections