Overview

overview

10

Static

static

10

38076442fd...ea.exe

windows7-x64

10

38076442fd...ea.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    38076442fd33464d98fbbbe9e8093fb72413f4c926f09f5472bd3d5611c7e3ea

  • Size

    1.2MB

  • MD5

    10f5b25292e2ec1541ae3b51ccc2f2e7

  • SHA1

    a88079d71bce9f4d5b6abd7348a6ee14f6e27de1

  • SHA256

    38076442fd33464d98fbbbe9e8093fb72413f4c926f09f5472bd3d5611c7e3ea

  • SHA512

    3b1a96bac5c2dda1a283a1b523263ae8eacc9b6787b38c1f3626913e51625510574dd864fde9acbe181600bf77f7877bed663bcfe6c27eb2b174701cdd6fe1f0

  • SSDEEP

    12288:iocDrKmVri8luUkwg9nAaLaQcFxSh4gRjEw1dEDZ7IxOo+oXB/ym+ZVVB4tabHGa:eVGQuhwgcSh4gRjldEXofXB6VVEt

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://116.204.91.166:8060/Dr3t

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; MANM)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 38076442fd33464d98fbbbe9e8093fb72413f4c926f09f5472bd3d5611c7e3ea
    .exe windows:6 windows x64 arch:x64

    9cbefe68f395e67356e2a5d8d1b285c0


    Headers

    Imports

    Sections