Overview

overview

10

Static

static

10

1e7ed74c25...55.exe

windows7-x64

10

1e7ed74c25...55.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1e7ed74c2591ab29d611bfe28b53a00ecdf476f4b5e65d0d957c4f0612ceb755

  • Size

    1.6MB

  • MD5

    bc2ee8e16945021192eb786b96095b3c

  • SHA1

    cc4d2c6ffc431389188c9a1138b7bccc8ba8aec9

  • SHA256

    1e7ed74c2591ab29d611bfe28b53a00ecdf476f4b5e65d0d957c4f0612ceb755

  • SHA512

    8a0ee31a4d0d52f53a99e71862aff6ea052910f7f383f9c3e9ce0ee090fc858244625de7aba218787c71d0c182092721c3fce6b28b850337140f28e96b20cef5

  • SSDEEP

    49152:BDWaxukVtgMmrb/TsvO90d7HjmAFd4A64nsfJ7gaopibmfTfNCG:vYWpibmrfN

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.1.201:80/JwBZ

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MASP)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1e7ed74c2591ab29d611bfe28b53a00ecdf476f4b5e65d0d957c4f0612ceb755
    .exe windows:6 windows x64 arch:x64

    9cbefe68f395e67356e2a5d8d1b285c0


    Headers

    Imports

    Sections