Overview

overview

10

Static

static

10

0cc93f5a18...7a.exe

windows7-x64

1

0cc93f5a18...7a.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    0cc93f5a18e6bf32f430d13f7cbb8aff3f061a05167698ccd3e333fe1fdb4a7a

  • Size

    1.1MB

  • MD5

    9d2fae1f1a4f044e01f423a39d163027

  • SHA1

    060796c9622c0015930b601939ba4842173fa067

  • SHA256

    0cc93f5a18e6bf32f430d13f7cbb8aff3f061a05167698ccd3e333fe1fdb4a7a

  • SHA512

    0d0d922b395f0f0afeb5063a8049faef3c0e32481eff3452841370a2d2e0fc82f84798346752ea679c23ca75871d21ea5e72542be20b0f352fc2392eea4b2ae0

  • SSDEEP

    12288:K27q8BViDLj2nIccHu+TR/gvpQW7GzBI2Xf/7Vh:KHl/2ngBR8p3uF3Jh

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://update.office-oa.org:8443/api/2

Attributes
  • user_agent

    Host: update.office-oa.org User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0; MALC)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0cc93f5a18e6bf32f430d13f7cbb8aff3f061a05167698ccd3e333fe1fdb4a7a
    .exe windows:6 windows x64 arch:x64

    93a138801d9601e4c36e6274c8b9d111


    Headers

    Imports

    Sections