Static

static

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    04f0ae966c67fea1c015e7d286ca1dccb80351cdc280942ab541e48f7b4f371f

  • Size

    455KB

  • MD5

    fb609b7f1a1d48a59cb4850630db15bc

  • SHA1

    8b4657aa8f620d66a061a6e92524333d5f17583d

  • SHA256

    04f0ae966c67fea1c015e7d286ca1dccb80351cdc280942ab541e48f7b4f371f

  • SHA512

    1e4d92a6e67e07312ae5ba621e7d7c4f8c627c0b43da566d0f86f23075543b8434c68488c133b1c3685e025bf64c31ae64c8d7542b267ea83ead82c345ba610b

  • SSDEEP

    6144:fR6LNVHCS+/lnvraxZnrHtwOUDXvMXmo2Y9vYFAno9u:fwLNVHCLxr+JHtZkXvWmx0vYFAno9u

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://116.204.89.237:80/pFs4

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 04f0ae966c67fea1c015e7d286ca1dccb80351cdc280942ab541e48f7b4f371f
    .exe windows:4 windows x64 arch:x64

    132abb490e82cd46c335171aa4ec08b1


    Headers

    Imports

    Sections