Overview

overview

10

Static

static

10

bd378043a4...21.exe

windows7-x64

1

bd378043a4...21.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    bd378043a49472a627cb2a8b954815d5890498bcefacf5ede60de536c3f5f421

  • Size

    1.5MB

  • MD5

    d2ded625a2b529d2c17dbc593adf6013

  • SHA1

    9c172b5bb44beb19d620504e06700d54fb912dce

  • SHA256

    bd378043a49472a627cb2a8b954815d5890498bcefacf5ede60de536c3f5f421

  • SHA512

    69cb2c0e1e5f26297435c1e371313e1021c0b8f6edde2d1df404b2ff2d615af0714807af80ecf1ece22c6be69748d8d8388ea29d4f2d9a7107abd75126e2fbb2

  • SSDEEP

    49152:V7bkE3Kpurb/TavO90dL3BmAFd4A64nsfJVhgUv4NX/VaJMJzks:d3SK/y4qJgs

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://172.21.72.102:80/q5oH

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bd378043a49472a627cb2a8b954815d5890498bcefacf5ede60de536c3f5f421
    .exe windows:6 windows x64 arch:x64

    9cbefe68f395e67356e2a5d8d1b285c0


    Headers

    Imports

    Sections