Overview

overview

10

Static

static

10

bda6d68740...eb.exe

windows7-x64

1

bda6d68740...eb.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    bda6d687403ac8f8242ce486d36b021a8d7ef64248fadf517ff7b3350544c2eb

  • Size

    1.4MB

  • MD5

    f999d464e96b998a70fa798fa49e653c

  • SHA1

    d513742a2cf2497a8589fb52ee0e2fd03ae4af34

  • SHA256

    bda6d687403ac8f8242ce486d36b021a8d7ef64248fadf517ff7b3350544c2eb

  • SHA512

    a1b159e165386545486a41e2962bc4b460e2be040e27e7e704438f28e353e0275521c26466f5ecd594844e5c059f2755ee3df8d51e765d69deebc3b5015dcb0c

  • SSDEEP

    24576:aSgrUZ32LZHTSpQvKyCZfTTgOUeWc/1OGy13:/g63AZHepQv7CpgOUg/1OGy1

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://116.204.91.166:8060/Dr3t

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; MANM)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bda6d687403ac8f8242ce486d36b021a8d7ef64248fadf517ff7b3350544c2eb
    .exe windows:6 windows x64 arch:x64

    9cbefe68f395e67356e2a5d8d1b285c0


    Headers

    Imports

    Sections