Overview

overview

10

Static

static

10

7a8e296edd...f9.dll

windows7-x64

1

7a8e296edd...f9.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    7a8e296edd18a4acc153947779e6ab7ecb40bac91ba4efb807d281cba6c098f9.zip

  • Size

    148KB

  • MD5

    6489e61ac58e8f09452d5460a802bc5e

  • SHA1

    c4625793f50327c2820457e9987b677f8a2826d5

  • SHA256

    0a73415e1393a75cb16deb3d4525c0ac9dacc3009cf8e442e416133cbaad931c

  • SHA512

    fa59f7af5611f635f8fc80a37bf3feb7a9190f7a78340725c51a116460e295ab100f0eecc4351978850c46c1c8b43f87af7e3d0b453adecbac401029de6d0a40

  • SSDEEP

    3072:X84tJjDDPGyQpRzt9BhUArTBhBTbfpULkTlzzmEAvk:rjfGyQj/Bhfrtjf75zzSvk

Score
10/10
cobaltstrike

Malware Config

Signatures

  • Cobalt Strike reflective loader 1 IoCs

    Detects the reflective loader used by Cobalt Strike.

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7a8e296edd18a4acc153947779e6ab7ecb40bac91ba4efb807d281cba6c098f9.zip
    .zip

    Password: infected

  • 7a8e296edd18a4acc153947779e6ab7ecb40bac91ba4efb807d281cba6c098f9
    .dll windows:5 windows x86 arch:x86

    Password: infected


    Headers

    Sections