Overview

overview

10

Static

static

10

a2bcb0b189...e7.exe

windows7-x64

10

a2bcb0b189...e7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a2bcb0b1895feeefdd192e49cc73c4cc64c7ccf956d3e906f2fde70a232ae8e7

  • Size

    129KB

  • MD5

    859670c36ceca9f0e817c9bd7a74293c

  • SHA1

    707d4b2515f4793f734b08151fe2d7b85d675996

  • SHA256

    a2bcb0b1895feeefdd192e49cc73c4cc64c7ccf956d3e906f2fde70a232ae8e7

  • SHA512

    9b538dd9bbf8ddc22393c714b3a92932b1d96f72608a4dd27681a7c34daf71347cf586d91b0ac117c661ffea15314d971ef49be7bedca9969eab1b06444ba800

  • SSDEEP

    1536:2SBmQFbfsjy6maoXRB2/eWG7NVW/ZL1WUvMFMQiNXR/QUzOrJ2dY:2SBb00Bb7NVW/ZLwWRo8OrWY

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.197.131:5555/Ht4m

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; BOIE9;ENUSMSE)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a2bcb0b1895feeefdd192e49cc73c4cc64c7ccf956d3e906f2fde70a232ae8e7
    .exe windows:4 windows x64 arch:x64

    5d486b7a8df16e264ae0ccfc73fb4624


    Headers

    Imports

    Sections