Overview

overview

10

Static

static

10

12f070a316...6f.exe

windows7-x64

10

12f070a316...6f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    12f070a3161ba281200c18973902c0c726f6f6f5eced45db9c965c2c970f0f6f

  • Size

    51KB

  • MD5

    8d8780b98e8341eb5186699e9baf22ab

  • SHA1

    228d3916703ca8d41a86a90293e7ee6be89c774d

  • SHA256

    12f070a3161ba281200c18973902c0c726f6f6f5eced45db9c965c2c970f0f6f

  • SHA512

    6bb6b6d748596b8b1e05268f6bd535bef4782508655dd72960add2bf1f5c078344d9d817b297a4a437cda2215157a8025298e497036efa411e07f20537915ac4

  • SSDEEP

    768:R7BBnw6EjWRPbIwyWOZ7zKQu3S9fYu7EATTYmbSwCssG8hgNGOSJ+Ndm:R0z6Iwy/zFu3S9TIAvYgLgrOSwNdm

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://8.141.80.13:8039/jquery-3.3.2.slim.min.js

Attributes
  • user_agent

    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.34 Safari/537.36 Edg/

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 12f070a3161ba281200c18973902c0c726f6f6f5eced45db9c965c2c970f0f6f
    .exe windows:6 windows x64 arch:x64

    e153511e448d30a4bc04b11ad5a727d9


    Headers

    Imports

    Sections