Overview

overview

10

Static

static

10

a7286aeb3b...b8.exe

windows7-x64

10

a7286aeb3b...b8.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a7286aeb3bc9f20a145970861385b7e546c2f00350c10287149ae8b8922a86b8

  • Size

    8KB

  • MD5

    7e7f3bbda8341bdd3ecd6ff1f54da0d0

  • SHA1

    ee0941666d5592fda7e2a1571d40bc615d0bbb37

  • SHA256

    a7286aeb3bc9f20a145970861385b7e546c2f00350c10287149ae8b8922a86b8

  • SHA512

    ff26d985c665ed5943b85a551e361079397881cfb9460d5c5f89f18c813c09aa7cb30486bd27134b2b2e127a0a406ad896358b3ca0c450d5dac793d7a37f9790

  • SSDEEP

    192:n5r2HbrsEdYNce6DW57t7JYvfEHiJt8Nu:5r6brP7DqUvMHiENu

Score
10/10
upxcobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://10.10.10.130:443/Qjn4

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • a7286aeb3bc9f20a145970861385b7e546c2f00350c10287149ae8b8922a86b8
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections