Overview

overview

10

Static

static

10

4579fa23fe...c9.exe

windows7-x64

1

4579fa23fe...c9.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    4579fa23fe26bc0cbe62c3c93d3513715782cf75c78121f303d129816e61a2c9

  • Size

    389KB

  • MD5

    0bfafccd08352b4b826f24dcce95c156

  • SHA1

    4f937dafa5e99634906065cbe2f3da1a1be7b386

  • SHA256

    4579fa23fe26bc0cbe62c3c93d3513715782cf75c78121f303d129816e61a2c9

  • SHA512

    2e0c74c9ad33e3e3aab0503e4127310e12aa370948eea141f2ef791c0c9f8266515164c7df586159a24c64d12b29839425905704aa15925b6220ea889b596171

  • SSDEEP

    6144:yC01rCQorwpRUXtGq4EyJiXh8DjhH5RIOdLbQ8eGkMvhWPN:yC01rCgq45JiXh8DjF/3kMv

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://123.57.3.221:6813/rKWI

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; MANM; MANM)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4579fa23fe26bc0cbe62c3c93d3513715782cf75c78121f303d129816e61a2c9
    .exe windows:6 windows x64 arch:x64

    5918c7adfa24ee27069d08a9e5d460e9


    Headers

    Imports

    Sections