Overview

overview

10

Static

static

10

1002984d1d...a8.exe

windows7-x64

1

1002984d1d...a8.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1002984d1d53d6086ac4c74a0ca634e73c5f44b94d7251f7d5a0f67febc46fa8

  • Size

    1.7MB

  • MD5

    030cfb5c350d6a240a001520988b1643

  • SHA1

    7c8df6490d7f1e0b92f3ecd0d4352e4b5890ff5f

  • SHA256

    1002984d1d53d6086ac4c74a0ca634e73c5f44b94d7251f7d5a0f67febc46fa8

  • SHA512

    a6332b3bea23608a882214ea7a24428bd119195765acbff0b15f05bce58a06b7292b57746c5685add8a555e86c7594a7a252c4c8b036771a487d3a1ff716da92

  • SSDEEP

    24576:lJaLzJykAYLzcWPq6B19voLuYu+Ap8Ktvl3n/d9XJ3h:yLzJyk3fJYu+AuMt/dpH

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://8.130.124.10:5566/8Ohn

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; NP06)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1002984d1d53d6086ac4c74a0ca634e73c5f44b94d7251f7d5a0f67febc46fa8
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections