General

  • Target

    2e95486b91a1ba49355051a4350f62ac760ebb5262f8f1a752466983dda0cbe5.exe

  • Size

    1.4MB

  • MD5

    3610aa1ad1fe283916538f5c716e7f86

  • SHA1

    4a76e06b1175e284eabee83c86cb56e551fc9abb

  • SHA256

    2e95486b91a1ba49355051a4350f62ac760ebb5262f8f1a752466983dda0cbe5

  • SHA512

    e1d5eafdc7454cba8d6dbb19b3af541c31b87798a7740a8c86deea7cf64fd8d429df5c4c5fa53a80e3dfecc2a18ef2c9d5b24a53b124dadc6d86769db70ddb43

  • SSDEEP

    24576:1p+o5C9NQp0NB4TxJvmT5ko4QufVEk+ne95cQOqJUESBiI:mo5CXQpgB4TxJvK5n4QufVEk+e95cZqw

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.207.129:443/iJ9q

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0)

Signatures

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2e95486b91a1ba49355051a4350f62ac760ebb5262f8f1a752466983dda0cbe5.exe
    .exe windows:4 windows x64 arch:x64

    aedeace88c22991329d77b4400b84512


    Headers

    Imports

    Sections