General

  • Target

    76d746d3eb07ced76b4d009334d4085a08dbea0a3f994be49e5f131823c44adc

  • Size

    3.8MB

  • MD5

    dc1e4cee074827949744121ba79cb222

  • SHA1

    7bd3df7499e67df11799a74a7e7b2e64849a260d

  • SHA256

    76d746d3eb07ced76b4d009334d4085a08dbea0a3f994be49e5f131823c44adc

  • SHA512

    fb41fefa668147dd43c7ab47486ac7f23bffd2380860341ae3862efe2dce1663eb5af3edb472c910896e3a952121f0b5c519eaeade2d834138ac2fd8e2f0fd86

  • SSDEEP

    49152:Vh620SiPSwW4gU0SF5EB7lYODDNuhE/s8Xc0zh/ehqjJE:zwhW45EluI5uUhzFN

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.111.128:7777/JyYA

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; Touch; MASPJS)

Signatures

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 76d746d3eb07ced76b4d009334d4085a08dbea0a3f994be49e5f131823c44adc
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections