Overview

overview

10

Static

static

10

6543ded4ea...cs.exe

windows7-x64

1

6543ded4ea...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6543ded4ead53fe392cf7f2716ffa190_NeikiAnalytics

  • Size

    1.4MB

  • MD5

    6543ded4ead53fe392cf7f2716ffa190

  • SHA1

    d216ff144b4756a2c91e163b036e51374dd76078

  • SHA256

    1cc1925947cb6f71e7e963910d3d2b7095b971a3bc52ded489d7d8217738b8bd

  • SHA512

    83e41c211584cae15d54a72d33380e86cfa9d66736afb70a2406f27c528abf354c317e4f2f0da1257e882b85f95e398d73162719ce6e9f3664f495888b912543

  • SSDEEP

    24576:h0IWGNpegK8BwCziPXK2suNK22Mc+w7xlL6q:OJufVJTIK6Sp

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://43.139.43.172:80/oPrjVXU9qzkwazWqpFvt

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/5.0)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6543ded4ead53fe392cf7f2716ffa190_NeikiAnalytics
    .exe windows:6 windows x64 arch:x64

    4f2f006e2ecf7172ad368f8289dc96c1


    Headers

    Imports

    Sections