Overview

overview

10

Static

static

10

1313fbce2d...9c.exe

windows7-x64

1

1313fbce2d...9c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1313fbce2dee1df01075b4b0b5b8210d854f6c9908cd8f6c81f5cd59889a0d9c

  • Size

    1.1MB

  • MD5

    ef491ecf5a0adebd3c3b0af8eb1553da

  • SHA1

    a549075bdd954ad8bd1ad62bb6bd5f27d14348a3

  • SHA256

    1313fbce2dee1df01075b4b0b5b8210d854f6c9908cd8f6c81f5cd59889a0d9c

  • SHA512

    8a46e383765fde35c101e8bda03af97049412d1d639d3ee921d56620fdeaa2e8a8de082a997ee6212422de82af947f4e423e1f8f64cc3e7d34f0be2026756fac

  • SSDEEP

    12288:lktMLPbITh/pFaYjWefzQ7Sjk5gj6/Dg2V0MatEUoLxjWeXAXFMGAt:+iv6VpFTDzLzcWPR

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://47.94.236.117:8888/dQp8

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1313fbce2dee1df01075b4b0b5b8210d854f6c9908cd8f6c81f5cd59889a0d9c
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections