Overview

overview

10

Static

static

3

5dfa00f917...0N.exe

windows7-x64

7

5dfa00f917...0N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5dfa00f917e2698b9b29d8f5f80cdd00N.exe

  • Size

    9.5MB

  • Sample

    240726-1xre7a1ard

  • MD5

    5dfa00f917e2698b9b29d8f5f80cdd00

  • SHA1

    1fbf1fcb77d294685962c6e199cee7bbb3215859

  • SHA256

    d5e324cf92f71748cc5be8f7a3fb9115139323f9ac58a9d8a34f440c758fdebe

  • SHA512

    98491ebbf28ea4875a2e1112a130ee2cf31b40fe4f84f278796880216af13b13acf1df1f562f85583b87f5a6abc4385c590b416dae59a1f44907b7b8f3ff6ab4

  • SSDEEP

    196608:dvb+GI7Vr7PnILLZWdoCOiV9onJ5hrZERJyiU8AdZYJERoWIrTYJvte:EP7Vr7M5liV9c5hlERFAdZYyGWIrkNt

Score
10/10
cobaltstrikebackdoorpyinstallertrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://81.70.190.25:80/FwRN

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0; .NET CLR 2.0.50727)

Targets

    • Target

      5dfa00f917e2698b9b29d8f5f80cdd00N.exe

    • Size

      9.5MB

    • MD5

      5dfa00f917e2698b9b29d8f5f80cdd00

    • SHA1

      1fbf1fcb77d294685962c6e199cee7bbb3215859

    • SHA256

      d5e324cf92f71748cc5be8f7a3fb9115139323f9ac58a9d8a34f440c758fdebe

    • SHA512

      98491ebbf28ea4875a2e1112a130ee2cf31b40fe4f84f278796880216af13b13acf1df1f562f85583b87f5a6abc4385c590b416dae59a1f44907b7b8f3ff6ab4

    • SSDEEP

      196608:dvb+GI7Vr7PnILLZWdoCOiV9onJ5hrZERJyiU8AdZYJERoWIrTYJvte:EP7Vr7M5liV9c5hlERFAdZYyGWIrkNt

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks