General

  • Target

    7676bc6cfd7330d7b804b45889f4fa4e4cb9b5839f78c17b16c7541451079dcb.zip

  • Size

    111KB

  • MD5

    0d3e353118fa66001c946081a2683865

  • SHA1

    b745dbdcaa919ceda581ac279556dea96190ab65

  • SHA256

    14ab35376f0c993c237139f5e8c386961699ba325a7d5cfc4da98e6e8394e017

  • SHA512

    0a3b7c5e0e0f32efe041d81561bce1ed3b346d436bd7e658b0a449721b2167a546dfd502a7d8ea1fd6f405ed0ba47b24591a4267eb20e082988e841ca0d85423

  • SSDEEP

    3072:dZgho/bMH1Xc4QmsHW5pTt7Nc+r15QDN+YJNiUoqThkE:dWKzm2TW5ruUcMYBtkE

Score
10/10

Malware Config

Signatures

  • Cobalt Strike reflective loader 1 IoCs

    Detects the reflective loader used by Cobalt Strike.

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7676bc6cfd7330d7b804b45889f4fa4e4cb9b5839f78c17b16c7541451079dcb.zip
    .zip

    Password: infected

  • 7676bc6cfd7330d7b804b45889f4fa4e4cb9b5839f78c17b16c7541451079dcb
    .dll windows:5 windows x86 arch:x86

    Password: infected

    6a6c26505ccc986d1049664aca817a99


    Headers

    Imports

    Exports

    Sections