Overview

overview

10

Static

static

10

b5589ccee7...4b.exe

windows7-x64

b5589ccee7...4b.exe

windows10-2004-x64

Resubmissions

19/12/2023, 15:55

231219-tc4rfsbhh3 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b5589ccee7834cdcf7b526da8f8efd882d6b718fe8a087c523aed011bd835d4b

  • Size

    381KB

  • MD5

    f65907aaf76c20f4bc9b2f522f942174

  • SHA1

    fe5cc69b4d27792bfd1a07bde4e5aa5fd8f9b4d3

  • SHA256

    b5589ccee7834cdcf7b526da8f8efd882d6b718fe8a087c523aed011bd835d4b

  • SHA512

    0d54c4de5af7c57f9b146e3ee047fbef5ccc6dda409bf4278453a041d575397f9ede64dd063775d11c2719290f9e1153889d07f1acc13b63b2fe6495830313ec

  • SSDEEP

    6144:AMnxlZ2h0IaA41uwivP/CGftZnygWzxLjM7HH5EXX/Q:AaRSPFltygWNY7n5

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://124.71.143.196:28888/EfLf

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; ; NCLIENT50_AAPCDA5841E333)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b5589ccee7834cdcf7b526da8f8efd882d6b718fe8a087c523aed011bd835d4b
    .exe windows:6 windows x64 arch:x64

    1a885fb586137990697cb9a9b2c93259


    Headers

    Imports

    Sections