Overview

overview

10

Static

static

10

65358f965d...0N.exe

windows7-x64

10

65358f965d...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    65358f965dc7c8f52204ad4d690dca70N.exe

  • Size

    62KB

  • MD5

    65358f965dc7c8f52204ad4d690dca70

  • SHA1

    10cc499b37ed02254312c63e82543accd6adac49

  • SHA256

    9ee8aaa8e1b36f45ce1a19e7750ad49c4a4fdae647294fb6f74c5af1655711c8

  • SHA512

    3bb976863d3cd69db39f3e49d54fac1c75803ab972700df1a8e2368a59f9217ffdf9d0e6a21d755084e4b96da48b2635df564ca7c85e8593f96d52df309f524e

  • SSDEEP

    384:AnU+asaamslJa+0dsswG3VaeTHyTGOZ0YuImSzBdZAE+8JQfBBJw0zA30hNYAy9e:ApabambPyT9m+TdW8QBICAEEAy9

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://117.50.180.189:80/q4hP

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 65358f965dc7c8f52204ad4d690dca70N.exe
    .exe windows:6 windows x64 arch:x64

    2df9bc2cc556c6487b6e57c42efc4aff


    Headers

    Imports

    Sections