cobaltstrike | 07bb68a750282bc9f7fc0ffcfac3fa3087cfd80b8dbfbc66716d7d7cc167bf88 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07bb68a750282bc9f7fc0ffcfac3fa3087cfd80b8dbfbc66716d7d7cc167bf88
Size

376KB
MD5

a226e805e6cf35c8f62432247214f2e0
SHA1

cfb1f21999da6949d78dbb058ba4b868d5abc96b
SHA256

07bb68a750282bc9f7fc0ffcfac3fa3087cfd80b8dbfbc66716d7d7cc167bf88
SHA512

274b4815d5e4f24b7ba9d939ad16155859741e47c688dc44574d088617d7357b4c2aa546208dc286a753b4f63a27441756542dfb50896bdd6114a369605b263b
SSDEEP

6144:rzbU7fDRU7fDCvT4ZTXzCLjIk5UDbrKM:rIf2fOMJ8VUDX

Score

10^/10

0 cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

Botnet

0

Attributes

watermark
0

Signatures

Cobaltstrike family
cobaltstrike

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07bb68a750282bc9f7fc0ffcfac3fa3087cfd80b8dbfbc66716d7d7cc167bf88

Files

07bb68a750282bc9f7fc0ffcfac3fa3087cfd80b8dbfbc66716d7d7cc167bf88
.dll windows:5 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.text
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ