Overview

overview

10

Static

static

10

e68ca4ad1c...0b.dll

windows7-x64

1

e68ca4ad1c...0b.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    e68ca4ad1cf0e5cc655c323afac7baa307b535545ceb3086f01e51cee5331f0b

  • Size

    110KB

  • MD5

    b1ca396a5e0f9a8c38135694d76dfcfe

  • SHA1

    795d83c3e9876ac47da6884718d721b01c6296c2

  • SHA256

    e68ca4ad1cf0e5cc655c323afac7baa307b535545ceb3086f01e51cee5331f0b

  • SHA512

    3fb17209b2128a35cb0babf952136da6c16ef07c2ef3b3e015cb634ce8c7d376955ae4e1520a847da6f4f749402d36402f1295b8f9168c599b83afee2b96901f

  • SSDEEP

    1536:w4L/x2/Iz39yuSXtwmmsB15jLECHTkQb7Cl7MbiR9RrRlIgmO:3MAuwmvECHTkQgRrRl2O

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.111.100:5555/7moJ

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; Touch; ASU2JS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e68ca4ad1cf0e5cc655c323afac7baa307b535545ceb3086f01e51cee5331f0b
    .dll windows:4 windows x64 arch:x64

    82240cdb412a972b68b799aa7288fd97


    Headers

    Imports

    Exports

    Sections