Overview

overview

10

Static

static

10

a79568a1a6...7b.exe

windows7-x64

10

a79568a1a6...7b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a79568a1a62ede1359bcaca42589e2517dc80eacbb5a4585b43bb1fef3d98a7b

  • Size

    129KB

  • MD5

    4a43c0519ee61c8dcf90e6c2d1e54e60

  • SHA1

    602dd52321a3b6055589603c15d04ad4e89eedee

  • SHA256

    a79568a1a62ede1359bcaca42589e2517dc80eacbb5a4585b43bb1fef3d98a7b

  • SHA512

    310c5dd70af7c6af9241b91ad5bcc0b1013ae53a1479eef1507b7c7ee8ffa1958095896eaff409fde4d885e2dd6ade4386a8802e01c7bb215c8ae214c28ac746

  • SSDEEP

    1536:MBrODOvmkKFbqsdysmaVXRksb0eWGbN19ftK1WUvMFMQiNJRlQpjC3QQC0HCY:WrPJgt/kobN19ftKwARGpjW3RiY

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.111.93:5555/9Fmq

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a79568a1a62ede1359bcaca42589e2517dc80eacbb5a4585b43bb1fef3d98a7b
    .exe windows:4 windows x64 arch:x64

    5d486b7a8df16e264ae0ccfc73fb4624


    Headers

    Imports

    Sections