General

  • Target

    2024-05-03_5228bde44f233efaefa278ae5ce7e60e_cobalt-strike_lockbit

  • Size

    320KB

  • MD5

    5228bde44f233efaefa278ae5ce7e60e

  • SHA1

    81242b7b5b2262a25fcea2d8ad107723f6183ae3

  • SHA256

    9ebcff7658867f84e74a428188678821240d1d960d948a3f53ca012c4da1f2ba

  • SHA512

    eb8f87ff0d5e10b31b4e0f6fa688513ea93a075b78bc5c68609afc44552b542977833e1b9c97854f3d131ac7ea811b985dc2a9d3f53bf044bfe0a8665da46752

  • SSDEEP

    3072:U4jPfhWV9XBb0MAtrg0OoHpFcwTXT2ionDR1g2br54Qun9UItLpCEcbqGpYl7WUw:U4jUXB0MZDoJFc4bQgI6QkUIcbpO5zx

Score
10/10

Malware Config

Signatures

  • Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003) 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-03_5228bde44f233efaefa278ae5ce7e60e_cobalt-strike_lockbit
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections