Overview

overview

10

Static

static

10

50b922322d...25.exe

windows7-x64

10

50b922322d...25.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    50b922322dc2db9ed595c2100f71e8b9a0b878c247c44b2efbeb78d1aa32b525

  • Size

    1.5MB

  • MD5

    a23c112a6394faf5e5540b5725d6f778

  • SHA1

    b45e56866b9c370094ce7d1ff75f1782f1da603b

  • SHA256

    50b922322dc2db9ed595c2100f71e8b9a0b878c247c44b2efbeb78d1aa32b525

  • SHA512

    2a60ad2cb6dd3169e5f1f3021a2bc3f99694d560b525bbb8d8469c28aefb031c68d71b43524dd1a142dd67768185487ed7faee65f4363acd5126cf83bdf84959

  • SSDEEP

    24576:HNBQOGPkc8Na436YeyNUv3ZgO77GLC1W/ouhTfLWguHyupwn8:HNBPGPkc8Nb36CAZgO3GLC10ouhTfLWM

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://fk.n0reply.eu.org:8443/api-opt-2023-gfr/2

Attributes
  • user_agent

    Host: fk.n0reply.eu.org User-Agent: netdisk;7.1.3.2;PC;PC-Windows;10.1.19763

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 50b922322dc2db9ed595c2100f71e8b9a0b878c247c44b2efbeb78d1aa32b525
    .exe windows:6 windows x64 arch:x64

    f0ea7b7844bbc5bfa9bb32efdcea957c


    Headers

    Imports

    Sections