Overview

overview

10

Static

static

10

8cb925d3b1...fe.exe

windows7-x64

1

8cb925d3b1...fe.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    8cb925d3b1bef087159b1cbdddbd0396e3117565a4ad900de2015df2fb6ae0fe

  • Size

    1.3MB

  • MD5

    7730b443f7ae71b8d18c0a69e1445fd0

  • SHA1

    a095a482886bf37152dd0e6fcd39da52df121fa7

  • SHA256

    8cb925d3b1bef087159b1cbdddbd0396e3117565a4ad900de2015df2fb6ae0fe

  • SHA512

    934473556ccaa161c3a89a152c4298b975b46789665b979a86dcad89563e9e2e3fd4bbb796c9c86af96bd9ce941823b658c7dced402237a67f8fcf5a47ed43da

  • SSDEEP

    12288:XyTd/XQR/OS500kSmFjIK5ln4ZfBeayWG1gvT5KtKV6cxR+2V0x+EEXo3ujPnFVF:XyR/QBdkSG+BeaLytKTCWJPFVFtR

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.1.15:7777/c9xI

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; MAGWJS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8cb925d3b1bef087159b1cbdddbd0396e3117565a4ad900de2015df2fb6ae0fe
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections