Overview

overview

10

Static

static

10

f62314ce14...b1.exe

windows7-x64

1

f62314ce14...b1.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    f62314ce148b8d8b2fd3168174223aacf984e2f86cf093b6bb6fae7f014bb0b1

  • Size

    2.7MB

  • MD5

    0bb88387af9120e128b148c12e1d92d5

  • SHA1

    6feaa7276eaa3501845db614fed55bfce8050f93

  • SHA256

    f62314ce148b8d8b2fd3168174223aacf984e2f86cf093b6bb6fae7f014bb0b1

  • SHA512

    f7ed626556e742383a74e224e1a3f51c5f68c04b6f5e5b974b2fcce6bac3ddda2a5344853b0f353453a88fc72299b2b4fef6f99006b946eaa68afb83f6768dad

  • SSDEEP

    49152:gsANbP+jB5jaXAK/KkNjPIdbmRb0k8npXhgTrY9l1xNNbz3/TRXxqqpr:+bG9zJl1xHzvTXqy

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://154.204.178.55:5555/b2Wr

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; Touch; MASPJS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f62314ce148b8d8b2fd3168174223aacf984e2f86cf093b6bb6fae7f014bb0b1
    .exe windows:6 windows x64 arch:x64

    4f2f006e2ecf7172ad368f8289dc96c1


    Headers

    Imports

    Sections