Overview

overview

10

Static

static

10

b521614953...c6.exe

windows7-x64

10

b521614953...c6.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b5216149533bc58ab7ec6468306eaedbee6bba28b78e40d04573e8064422efc6

  • Size

    73KB

  • MD5

    d4a4497c3d8ce393e1d28e9cc12d6a8a

  • SHA1

    61fcddfb7113c2d5df923b4861a474d4f05507ba

  • SHA256

    b5216149533bc58ab7ec6468306eaedbee6bba28b78e40d04573e8064422efc6

  • SHA512

    987d73edf894e87d47095634bea865d263a4304a7e45263fbdb047ea2d39e33ba086ce6e632934b644502fb2308fd2fa9b6a64d408434b7d6739cbd1fc79e9fc

  • SSDEEP

    1536:8veWTWrSBTRB7BUP3R0s+1Lc/wh89PiujhyI:hkRB1W/w6ijI

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://123.56.194.52:80/Cp8r

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; MAAU; NP08)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b5216149533bc58ab7ec6468306eaedbee6bba28b78e40d04573e8064422efc6
    .exe windows:4 windows x64 arch:x64

    a4d67e232013b422c8cb9f316940a136


    Headers

    Imports

    Sections