Overview

overview

10

Static

static

10

91cd70dcce...6d.exe

windows7-x64

10

91cd70dcce...6d.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    91cd70dcce87e834c25f4a927954f074195db0447f8f96d203607db2930ad66d

  • Size

    1.9MB

  • MD5

    dd29087571a5d0c3fd3601d4496b9fc8

  • SHA1

    1d3c5c4e658519d75deb6bfbd1cef046ed5719c4

  • SHA256

    91cd70dcce87e834c25f4a927954f074195db0447f8f96d203607db2930ad66d

  • SHA512

    077903b5921de9bf2b4bb3f691fd11b1a05fcdc19e8647d41d4826ac5aa01ae157610856f0a1ccad18605f494b81a8bd6e53c48be99393160bfaff3c16ac135f

  • SSDEEP

    24576:lztos8WqFwiQ5KQi1GPugl2Jhsar1aSw5L8DH2xCqewEcxM0Uto:lZos8WqGiuuCuglahsar1YzCqewHxMh

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.1.7:80/myC4

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; QQDownload 733; .NET CLR 2.0.50727)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 91cd70dcce87e834c25f4a927954f074195db0447f8f96d203607db2930ad66d
    .exe windows:6 windows x64 arch:x64

    f0ea7b7844bbc5bfa9bb32efdcea957c


    Headers

    Imports

    Sections