Overview

overview

10

Static

static

10

43ba62cbe9...7b.exe

windows7-x64

10

43ba62cbe9...7b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    43ba62cbe9cb412caa0362118e14ae8401d74ce0704c445b5dc8c0409b9d4b7b

  • Size

    1.6MB

  • MD5

    9810292aaac877633f49202e819f66c6

  • SHA1

    696a52dbebfebbd9fde53211463e2ca90062d825

  • SHA256

    43ba62cbe9cb412caa0362118e14ae8401d74ce0704c445b5dc8c0409b9d4b7b

  • SHA512

    a7d3339a3b2ae2741bf7acdd786edf24dee15f1d7420f20eed4a7377a9354b98ef4f2fa413bc224c1dbcf8073e5c1c208c777d258ea77c1f189b8ee9a3d9a7cc

  • SSDEEP

    24576:R+Lt4Bl4uABiNsMf0Qh027TsKoAZF3ZUIlPF9rLmoJo:YLSBquL+uhdTsKFF3ZvrmoJo

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://89.116.64.190:1234/jquery-3.3.2.slim.min.js

Attributes
  • user_agent

    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Language: en-US,en;q=0.5 Referer: http://code.jquery.com/ Accept-Encoding: gzip, deflate User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:24.0) Gecko/20100101 Firefox/24.0

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 43ba62cbe9cb412caa0362118e14ae8401d74ce0704c445b5dc8c0409b9d4b7b
    .exe windows:6 windows x64 arch:x64

    4f2f006e2ecf7172ad368f8289dc96c1


    Headers

    Imports

    Sections