Overview

overview

10

Static

static

10

d32a3b6c2a...c1.exe

windows7-x64

10

d32a3b6c2a...c1.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d32a3b6c2ae0cb290cc83084174d6c3047865c4fd3695b063ead1586a1e932c1

  • Size

    1.3MB

  • MD5

    b19bc622046573b897bec0033aa26f68

  • SHA1

    459fd1410a225067a196b20ff8efbc72ce71095f

  • SHA256

    d32a3b6c2ae0cb290cc83084174d6c3047865c4fd3695b063ead1586a1e932c1

  • SHA512

    4e9bb786a7594f677337e62c562a976bfc346f818e6cbb0830aff02b05d364012087cdbc0b5b96f2462e6327d97bb2812d007f6b2cf86e6d7435ba7425bc9f4a

  • SSDEEP

    24576:9GcwRXBvVtU1Z1+NZIQWBtFsoVg7exdDrmZUGkORQy/8m:IFVymf0DS6y/

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.137.3:80/yQPC

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; Avant Browser)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d32a3b6c2ae0cb290cc83084174d6c3047865c4fd3695b063ead1586a1e932c1
    .exe windows:6 windows x64 arch:x64

    4f2f006e2ecf7172ad368f8289dc96c1


    Headers

    Imports

    Sections