Overview

overview

10

Static

static

10

cec89b24ee...20.exe

windows11-21h2-x64

1

Resubmissions

25/04/2024, 09:41

240425-lnwafshe33 10

25/04/2024, 09:28

240425-lfhdmahd8v 10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cec89b24eec7eaf55f755b30ed386bd78593a09a2e1e852535377ad8294f8f20

  • Size

    1.4MB

  • MD5

    09b49d3cb365a5b43d89ad187ba2e1a9

  • SHA1

    c2d742bfe37d4512e286c0b724554e3209af9fec

  • SHA256

    cec89b24eec7eaf55f755b30ed386bd78593a09a2e1e852535377ad8294f8f20

  • SHA512

    f3c2d61a90a3a9461a494956d42e9ac930ffdca09a2384ce93c7311d5a807a90bff95e07950f3cc04cdb62611c60966ac88a0e316ad3d438b12764b5dda136fa

  • SSDEEP

    24576:b0jS5ySzAaNvqRkNqOgUng8pgD5ygUmF6+5o1x:QjSA+As84gxAgUsfo1

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://38.147.170.150:8888/dPhA

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; yie9)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cec89b24eec7eaf55f755b30ed386bd78593a09a2e1e852535377ad8294f8f20
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections