Overview

overview

10

Static

static

10

b8f2a2318f...3a.exe

windows7-x64

1

b8f2a2318f...3a.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b8f2a2318f7936a830bd51f33227d057fa9d14195efada73cb0a3baeffb1a83a

  • Size

    1.3MB

  • MD5

    dec0cd55bc5352e45667926db1ba542a

  • SHA1

    5e1a71ef8cb6a3faa600a4260a22de8be4d53a0a

  • SHA256

    b8f2a2318f7936a830bd51f33227d057fa9d14195efada73cb0a3baeffb1a83a

  • SHA512

    539d624a0f841c9c5c817d0f174e3915ba908f9bd9c8abf020434fb25b646c3d8daf12555d07967b799f4b86561cc9cba820c0a99129fc8beaf60c3bdf7e7afc

  • SSDEEP

    24576:taLL/AJYg2M+B15txfi3BwC6k+neOWtqpzuN+hZd:KcYgWX06kEeOu+hn

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://sw.falsh.co:443/jquery-3.3.2.slim.min.js

Attributes
  • user_agent

    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:002.0) Gecko/20100101 Firefox/117.0

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b8f2a2318f7936a830bd51f33227d057fa9d14195efada73cb0a3baeffb1a83a
    .exe windows:6 windows x64 arch:x64

    4f2f006e2ecf7172ad368f8289dc96c1


    Headers

    Imports

    Sections