Overview

overview

10

Static

static

10

8e19e6d04e...4e.exe

windows7-x64

1

8e19e6d04e...4e.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    8e19e6d04e7332d626fa8d6ec2450cb627296d75eeb43ae2bd3dfa7bcbfc3f4e

  • Size

    1.2MB

  • MD5

    59ca517c8399c746fc0cf8a501d9abc2

  • SHA1

    e30f568c2a3cf872fe7f0d0dcffe3517a4d38aa5

  • SHA256

    8e19e6d04e7332d626fa8d6ec2450cb627296d75eeb43ae2bd3dfa7bcbfc3f4e

  • SHA512

    35ae8dc56add38bc6f17ddfc838cb9c6368488e5d116bb9631b69dd2656afc7ad47139213aed501797b5ea0a25c9c7dc0eb43dd8e6658302a90e8a89e3a17d57

  • SSDEEP

    12288:slafHhdZ9SUHk1fhw35wk58b8AQF6yyywOdDdlBChZLctpdCTf3r8qqYG55F:QkHmUHkq8bGVyctaTf7n1

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.142.124:80/RxOD

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; InfoPath.2; .NET4.0C)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8e19e6d04e7332d626fa8d6ec2450cb627296d75eeb43ae2bd3dfa7bcbfc3f4e
    .exe windows:6 windows x64 arch:x64

    4f2f006e2ecf7172ad368f8289dc96c1


    Headers

    Imports

    Sections