Overview

overview

10

Static

static

10

7ce3382f26...f3.exe

windows7-x64

10

7ce3382f26...f3.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7ce3382f2696ab1a0dfdad1c31a4e63397ae297549438c5b669910d648cc77f3

  • Size

    186KB

  • MD5

    5e651e51140aa348cd0a3ed67177d5ca

  • SHA1

    ec3665448103d7405b3cdaaa5a679ca67705da20

  • SHA256

    7ce3382f2696ab1a0dfdad1c31a4e63397ae297549438c5b669910d648cc77f3

  • SHA512

    04a22585ca5f37ee6ee10a4d007a40155b755843d838fd73267f68e2cdaa32a3fc35ed67527e3e23ad82ad2f167861c22beaaff0be261f0b9faaa4f9e9c58714

  • SSDEEP

    3072:6LvQ2fR+8e7B1fbYlNeg3jJjdYd2DfCWi/xkHwWWWp7jpJJJ655ZZoAPAH:o4RVl1fklNFzJDGxkHwWWWp7lJJJ6556

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://172.16.250.128:7777/Qx1c

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; MASAJS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7ce3382f2696ab1a0dfdad1c31a4e63397ae297549438c5b669910d648cc77f3
    .exe windows:4 windows x64 arch:x64

    c07fddd21d123ea9b3a08eef44aaac45


    Headers

    Imports

    Sections