Overview

overview

10

Static

static

10

f8add860a8...bc.exe

windows7-x64

1

f8add860a8...bc.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    f8add860a89641ca71f64bac700f94e6c88556f799090027c34187d88f5840bc

  • Size

    1.4MB

  • MD5

    f1186375a0e61a0efe38e2d0251d4ad8

  • SHA1

    13a63bc2037b0ffe420266da451f00a8dd538488

  • SHA256

    f8add860a89641ca71f64bac700f94e6c88556f799090027c34187d88f5840bc

  • SHA512

    d9a94abc16bfe62f5daa73dba4a74719c7f698910b96eb1a525e3b03b4420138fecdef07e6b60cc8941b4335508fbbe9514ce531873d824e47ea2845e84675ec

  • SSDEEP

    12288:xbdq91F7oqSVpjGlu/1by7asOv427sRqRHTtQbRhdsTpfPPSK/tj61jY10xlK1:9Q91FopjyU1brswi+Jj6pLxU1

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://www.francy.world:8443/oEx1

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko Host: www.francy.world

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f8add860a89641ca71f64bac700f94e6c88556f799090027c34187d88f5840bc
    .exe windows:6 windows x64 arch:x64

    4035d2883e01d64f3e7a9dccb1d63af5


    Headers

    Imports

    Sections