Overview

overview

10

Static

static

10

bbf2a102a8...83.exe

windows7-x64

10

bbf2a102a8...83.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    bbf2a102a82cd6cc1e431b52597bd6f7a34f3637c37765c8c0c7e55fe1459583

  • Size

    54KB

  • MD5

    a324897e19862c185204127a4579db00

  • SHA1

    2217fbec3e863dd549bfe4ea438772d3a0770f5a

  • SHA256

    bbf2a102a82cd6cc1e431b52597bd6f7a34f3637c37765c8c0c7e55fe1459583

  • SHA512

    cb3f43cc8bf2a674b3ccb85e1e54d9931c3602d2ce8c8a0ee58656c6438979448e5fa95b76f8b2ec394fe679c3cc26081f55f53da5ed5c7cf3523cdf91d4fc2e

  • SSDEEP

    768:VA7T58mSm8ag0s+1BNc/wTF8QDCP71VymV6YuvFWAYW+8:i+mSmu0s+1Lc/wh8QDCP7198zgFc

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://yj233.eu.org:8443/68D2NOF2

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; ) AppleWebKit/534.12 (KHTML, like Gecko) Maxthon/3.0 Safari/534.12 Host: yj233.eu.org

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bbf2a102a82cd6cc1e431b52597bd6f7a34f3637c37765c8c0c7e55fe1459583
    .exe windows:4 windows x64 arch:x64

    e44327108ef755faef54cd763c99599b


    Headers

    Imports

    Sections