Overview

overview

10

Static

static

10

d270a33d56...ab.dll

windows7-x64

10

d270a33d56...ab.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d270a33d5666d126a46dc4d577afe69a8695849435a3a02fddcca7aa36b77dab

  • Size

    9KB

  • MD5

    d43c92a6ae31833ef34a789ed8bf1697

  • SHA1

    417317903f2cc556cede8ea5b2f0f707c004a926

  • SHA256

    d270a33d5666d126a46dc4d577afe69a8695849435a3a02fddcca7aa36b77dab

  • SHA512

    6de6d4a8453f51fb840bf335f2efeafd69a729fbd71b2847b499acfe1d8e62eeaea708a666039d45951754cbfb852b41eb589cfb63c7b7ad93a9f0c8090eabb2

  • SSDEEP

    48:q0r+l6O5aXyn/hNhx4/jC/VyR9o3Vnaaw65GaxvzlS2PLJX8yNb0E:dX0Y7o3A4BxrlS8Liy

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://8.141.95.164:48049/4Dyl

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; BOIE9;ENUSMSE)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d270a33d5666d126a46dc4d577afe69a8695849435a3a02fddcca7aa36b77dab
    .dll windows:6 windows x64 arch:x64

    57d6e7112c8e716cfe2eb0ff9f36763c


    Headers

    Imports

    Sections