Overview

overview

10

Static

static

10

47113059c1...f2.exe

windows7-x64

10

47113059c1...f2.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    47113059c1ee869e24ad2227aaddb650323dd6da0b2f1eec44a9c6c22967e0f2

  • Size

    908KB

  • MD5

    12601385600605f58c12e7c605d69d71

  • SHA1

    62e7a82752dc2b80db640ad743ef5f8b400f2538

  • SHA256

    47113059c1ee869e24ad2227aaddb650323dd6da0b2f1eec44a9c6c22967e0f2

  • SHA512

    deed8ba3ddb77bdc1d0d030dc414385d85253a181aaea575e61e9844dcd4e82fc60482333b467d7d34c647edd8f3de4319b26e58e98b1febd86a01f51d0b5a45

  • SSDEEP

    24576:tqwndjfp6uObrEInpFJhWjAsAUHfP0hPv7FKOPpvGl5:Q4pyr9pFj/KfP0hXtvGl5

Score
10/10
upxcobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://172.21.72.102:80/q5oH

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 47113059c1ee869e24ad2227aaddb650323dd6da0b2f1eec44a9c6c22967e0f2
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections