Overview

overview

10

Static

static

10

595b0fe8ca...35.exe

windows7-x64

10

595b0fe8ca...35.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    595b0fe8caa28e50feead1d152a327b0d4ecda3796c59bb9404f0651e70caf35

  • Size

    4.2MB

  • MD5

    001e224d450dde2e1f810ee2df0faeac

  • SHA1

    91558fc425acdaef803115809a91622e438bec9f

  • SHA256

    595b0fe8caa28e50feead1d152a327b0d4ecda3796c59bb9404f0651e70caf35

  • SHA512

    86ef3e89d926395d9f421f85589a4652a826a7e3c94c161a1bc0f82d642aa7a822072b7a758b019e20cb93c1e1ff13253bd82bdc69bf285456b2649ee1d3fcae

  • SSDEEP

    98304:eO4WDLoR8HzwXM7rVSpiqpar5uOfVEOR5c4l5ST7NxAYu6Jc:es5bVE+lp

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://43.138.66.190:8848/l3Hv

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; ASU2JS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 595b0fe8caa28e50feead1d152a327b0d4ecda3796c59bb9404f0651e70caf35
    .exe windows:4 windows x64 arch:x64

    d49ba629b94c4f8667bc95e7f7c41111


    Headers

    Imports

    Sections