Overview

overview

10

Static

static

10

640955e100...07.dll

windows7-x64

1

640955e100...07.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    640955e10059eaa253bcb7df6349c607

  • Size

    9KB

  • MD5

    640955e10059eaa253bcb7df6349c607

  • SHA1

    b58c465a38c46fa1cab230d006b65ebefacf78eb

  • SHA256

    e2e4cc827468d0ee58545ad4a3dfff335acb5169f2c3a007110a55bed49abd33

  • SHA512

    46c0e9833776ce329fa845c703de65e73c333b62a933f56c2d2c0f67056bbce6d3c248777d9c8add72b58f683487993e307f008d8d3d864fc1ecc2e3365a78ab

  • SSDEEP

    192:gfxAm2XKdOZo9BRyvgQ9jOPHkJojBhOF:gf2NM9GgEjcHj

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://172.19.52.71:443/AaaZ

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 640955e10059eaa253bcb7df6349c607
    .dll windows:6 windows x86 arch:x86

    1683faf5a52cbb1723dff2268f6ebd72


    Headers

    Imports

    Sections