General

  • Target

    66f938962f7345fc936dab7903555c7fb15cc4915b28e131985051db8d428190.zip

  • Size

    111KB

  • MD5

    21669838cd3d735c747c28dba1417fb0

  • SHA1

    4ea569ddce23bc12281528823abac4d8c6bc7532

  • SHA256

    0d82388a1e00040ee26f779241a11f542b840bfab150d13b8fbee18f0bc7a790

  • SHA512

    a407e2834e3723490180e8488e2f548674c34b303983cf586f6082d2fad75ffa3f535fc6e97207221f4957415a6eb3026187261b0d2eb0d22f63af1abf80db6c

  • SSDEEP

    3072:wU4Y4qjWeK2U0HJdkPlQcCSVsbJJeE8156RYYgXfhMfA8v+nvu:wzIWeVpidQhdXeE818aqXGG

Score
10/10

Malware Config

Signatures

  • Cobalt Strike reflective loader 1 IoCs

    Detects the reflective loader used by Cobalt Strike.

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 66f938962f7345fc936dab7903555c7fb15cc4915b28e131985051db8d428190.zip
    .zip

    Password: infected

  • 66f938962f7345fc936dab7903555c7fb15cc4915b28e131985051db8d428190
    .dll windows:5 windows x86 arch:x86

    Password: infected

    b450a8226d3ed9f582c2242845b7b787


    Headers

    Imports

    Exports

    Sections