Overview

overview

10

Static

static

10

143d8884e9...01.exe

windows7-x64

10

143d8884e9...01.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    143d8884e9b44de6b8659afdc1e1212ff99b1ae547353c99fa120631a8d6ee01

  • Size

    1.3MB

  • MD5

    2b86b10506c2510f29f0681264d83c4f

  • SHA1

    47ab93b897d29a93ccf0f80da25c3c727381a8e4

  • SHA256

    143d8884e9b44de6b8659afdc1e1212ff99b1ae547353c99fa120631a8d6ee01

  • SHA512

    77d7c548c92db43a70276d08cb937b98b5da201713bedc044a54019f58b377626385005ca1b45a674e6e7c30bc8924f52671c3a48712a6ed2b1bb2687bae6bc7

  • SSDEEP

    24576:YMRlJQcgaxxPTxsHG6/EOxyqOxBfAXF6fzGjHLFsaM4q:xfHgaxxv6YkFrvFNq

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.52.1:4444/k6Om

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; Trident/5.0; BOIE9;ENUS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 143d8884e9b44de6b8659afdc1e1212ff99b1ae547353c99fa120631a8d6ee01
    .exe windows:6 windows x64 arch:x64

    4f2f006e2ecf7172ad368f8289dc96c1


    Headers

    Imports

    Sections