Overview

overview

10

Static

static

10

1a2da2ef4a...40.exe

windows7-x64

10

1a2da2ef4a...40.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1a2da2ef4a634ef084089f65198fd58826f12738b77f379f185bccf6d5c41c40

  • Size

    63KB

  • MD5

    cb14749627539c03bd7a2489cfbe5f6c

  • SHA1

    ca17353191f46ffefa5137a11a2350edc05d8b4e

  • SHA256

    1a2da2ef4a634ef084089f65198fd58826f12738b77f379f185bccf6d5c41c40

  • SHA512

    632d4dc6030d68d995d916748625e02bd83e7ca600ce3f760046355ea3bb6f4e4f9c62a24c6971ee489b203c5d74802a4dce9a375c8035fad85a4899e5b86eff

  • SSDEEP

    384:s63aG5ebmSQiS8eTycEyX2qup+IRP76Hfln2aHcx64PFMiUWDgQfBYeAmK9bAAyn:yGWDy9wSh2kePFMPWDxBSmK2Ay99

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.56.104:88/Mc8u

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1a2da2ef4a634ef084089f65198fd58826f12738b77f379f185bccf6d5c41c40
    .exe windows:6 windows x64 arch:x64

    c8d1213b6cff62bbacfde4a75ab77be9


    Headers

    Imports

    Sections