Overview

overview

10

Static

static

10

6c2e844101...aa.exe

windows7-x64

10

6c2e844101...aa.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6c2e84410147977d19f27906235d2a8f0d3f993f8dd0bc0b9b7d64e25c3921aa

  • Size

    10.0MB

  • MD5

    f9803d0afe72f039539f43df5fa84b52

  • SHA1

    8243db4cceda15eee941d471697a344e4d7c2e91

  • SHA256

    6c2e84410147977d19f27906235d2a8f0d3f993f8dd0bc0b9b7d64e25c3921aa

  • SHA512

    d8a37ec0ae5c65c5ac3567402f98f30c17616872faa559f4e384de26fd3ce132524277fdf6acd45e9c08b512ee0abd8209dbd9f1c9d27eddb29438748b03ca1b

  • SSDEEP

    192:o8wQYuph/uv795EBINNUIKx73Q5tfBDvmzVF8/:oLQYu7/uBmB/IK3q8VF8/

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://127.0.0.1:80/dBIn

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MANM; MANM)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6c2e84410147977d19f27906235d2a8f0d3f993f8dd0bc0b9b7d64e25c3921aa
    .exe windows:6 windows x64 arch:x64

    40e123cba263965fed8f8ec1ffe2e800


    Headers

    Imports

    Sections