Overview

overview

10

Static

static

10

d299d7ce16...b9.exe

windows7-x64

1

d299d7ce16...b9.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    d299d7ce16f6ad645983a41f44bae424fa63a9b59f922b8e0b11b8297e815cb9

  • Size

    2.3MB

  • MD5

    1a53e068c6d031ffae6d7b5d2367e191

  • SHA1

    30bcb7dba29848636ffe1728009d264a20ad5413

  • SHA256

    d299d7ce16f6ad645983a41f44bae424fa63a9b59f922b8e0b11b8297e815cb9

  • SHA512

    757d9bae1113177b4af36a9a39003d1699193310c5064e6b13ede9bb29792e92369b8981b50b374941b28308708ea2d50cd1fae51ff0685fba2e1bdacc3bb8bf

  • SSDEEP

    49152:wWKgipqj07qKWfnW/TuCbXYg9Zrs+D1myWYhwy3Kvk5TV+CRi1BX:l07qQIU1SkH+i

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://10.10.10.129:5555/oUXA

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; NP07; NP07)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d299d7ce16f6ad645983a41f44bae424fa63a9b59f922b8e0b11b8297e815cb9
    .exe windows:6 windows x64 arch:x64

    f0ea7b7844bbc5bfa9bb32efdcea957c


    Headers

    Imports

    Sections