Overview

overview

10

Static

static

10

f3e548c381...81.exe

windows7-x64

10

f3e548c381...81.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f3e548c381118a8b8879321d7d6295df4c424482f4ebd59abda7d489b6fabc81

  • Size

    54KB

  • MD5

    4de44d28ca1bb6a7d51ae154dc044736

  • SHA1

    470fe43ac855de939c905740a1ae770a32da5565

  • SHA256

    f3e548c381118a8b8879321d7d6295df4c424482f4ebd59abda7d489b6fabc81

  • SHA512

    11d68ba4b478a2dc4ca51302785196d83f2e79b665f23faa0eeec0a75d6b1e705d3d008708492ab7283f4637c906740a2a956058b5a7b3cf25618a51a5ceb5a6

  • SSDEEP

    768:L4p7In/PPPSS0iBccccccccccccccccccccccccccccczXmJZOYdeS4V:0p7sPPSS0rm9eh

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://cs.xcb.one:53/jquery-3.3.2.slim.min.js

Attributes
  • user_agent

    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f3e548c381118a8b8879321d7d6295df4c424482f4ebd59abda7d489b6fabc81
    .exe windows:4 windows x64 arch:x64

    318f19d6d721b6599d6ea7a133631468


    Headers

    Imports

    Sections