General

  • Target

    987b90b45c804bc83e2987a2134c4d26981f8ce6e55c24119a37a3fe90d848c4

  • Size

    11KB

  • MD5

    8ec0f22c1561ff2479be7c56a015a88e

  • SHA1

    8bce9e04237d8c8b417e1906f3d3e9c8cdfa73c6

  • SHA256

    987b90b45c804bc83e2987a2134c4d26981f8ce6e55c24119a37a3fe90d848c4

  • SHA512

    72ddfeef16b6b5ed02d8dd003bd49b2b11f83e78df98a04f12e98094dfe88a3ead4f9134c5e16ad14bbed5180dd2cfe91a85f5c07133375d1f321813f7b030d4

  • SSDEEP

    192:6mi9uq9Xw6lXF3WehMmF99DfA97sqaFw2P93baW:6R9uq9Xwc46sQz

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://10.10.10.130:443/Qjn4

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)

Signatures

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 987b90b45c804bc83e2987a2134c4d26981f8ce6e55c24119a37a3fe90d848c4
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections