General

  • Target

    78191e7dc1ccb6f81e5b956981b9948ce069dc70db72e51ad49702915f2d179c

  • Size

    11KB

  • MD5

    498f9d0fcb4a58a665dd9df615c155f1

  • SHA1

    450f320451b5b4b1521f2fb256df633e85a5d87a

  • SHA256

    78191e7dc1ccb6f81e5b956981b9948ce069dc70db72e51ad49702915f2d179c

  • SHA512

    7b58d6a54c413ee31d52c1c9774457dd30aad261d7ee65810f251f5902e600b7c80cee542d621367cbde8d524fb1ad0c97ca5e7fddddffeac452e5502997099a

  • SSDEEP

    192:G6N/aExNLKAfSnytfKkNXbouSWaFP4Lycn:fnfSylLR8Gf

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.198.128:4445/DXVk

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Trident/6.0)

Signatures

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 78191e7dc1ccb6f81e5b956981b9948ce069dc70db72e51ad49702915f2d179c
    .dll windows:6 windows x64 arch:x64

    a5974714081ff32ea56e136cc4080e4e


    Headers

    Imports

    Exports

    Sections