Overview

overview

10

Static

static

10

08485b7319...0N.exe

windows7-x64

10

08485b7319...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    08485b7319186fc35f083b02193bf290N.exe

  • Size

    54KB

  • MD5

    08485b7319186fc35f083b02193bf290

  • SHA1

    3e1cc776a5e031e505afe2e28af51781963b7d39

  • SHA256

    369b7fb8ade61c665a552c8c957c229654c83cc28a1a2a3a4747e1ae78c65488

  • SHA512

    abd563ad1dc727b39384d26dc934bec36d730ecab193a3168686d9dd5b290e3456ffc8303603a60d9d413781eaece2600f96166cc52f21acf1dabbed037782a4

  • SSDEEP

    768:ViSX05cORG81OfEqTIYv4gKNwFPSx8VxtWd5j4Hdr+h:VJ0G/86EqTIm4gKN2PSxr5jOd6

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://117.50.181.127:6789/XUHh

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0; MASP)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 08485b7319186fc35f083b02193bf290N.exe
    .exe windows:4 windows x64 arch:x64

    b1b2cd01d2c701d82ec1182703005e81


    Headers

    Imports

    Sections