Overview

overview

10

Static

static

10

c3d93ca740...62.exe

windows7-x64

10

c3d93ca740...62.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c3d93ca7406322a0e34e6f0c5545d5c3c337eb19391a52bb0be81566e0c47e62

  • Size

    1.3MB

  • MD5

    001d93457fc64095d5e8a66c2caaba6e

  • SHA1

    d9ff171537cd844ae6385c130fd27b8449ea831c

  • SHA256

    c3d93ca7406322a0e34e6f0c5545d5c3c337eb19391a52bb0be81566e0c47e62

  • SHA512

    d8fd61d585de82bc9010eabc472524c113987449e8c20b45c688f7e5920a59725b42174ae953bed6d64f7ea70ca63905f4106c94584f5b16529abca25db6c142

  • SSDEEP

    24576:j9Vssf10FmvIa8OgcaYgtwkZHx4XG29gi5cvpHGPDN5CG:j9rf10oIkcYgtXSn540H

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://124.220.56.139:7777/fSVN

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c3d93ca7406322a0e34e6f0c5545d5c3c337eb19391a52bb0be81566e0c47e62
    .exe windows:6 windows x64 arch:x64

    f0ea7b7844bbc5bfa9bb32efdcea957c


    Headers

    Imports

    Sections