Overview

overview

10

Static

static

10

71aace7054...6c.exe

windows7-x64

7

71aace7054...6c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    71aace705432048ec730a8dd4bd20e4024481a4d47270496ddaea9f2059cf96c

  • Size

    7.5MB

  • MD5

    7f17d94e3b6eee7ceed2bcefec1b7518

  • SHA1

    655db9689c3ef1c25017edf063705cfe9e43695b

  • SHA256

    71aace705432048ec730a8dd4bd20e4024481a4d47270496ddaea9f2059cf96c

  • SHA512

    bf5b9b58eb02b8386af036bf230a5f771a775d928786fa36f861dda16557579d66ccc49fee737fd7748d2b827b3d4aade2fd8417ff77bb201615e29805d10919

  • SSDEEP

    98304:keuIG5St4WA1h9eT393YigJhH0yfT+q2M51Y7uRlXgVLRuq97aJsXgbKhu5Fj2M:kzIzA1HeT39IigbauDXURuAaWXbEb

Score
10/10
pyinstallercobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.101.152:80/DhLe

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; BOIE9;ENAU)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 71aace705432048ec730a8dd4bd20e4024481a4d47270496ddaea9f2059cf96c
    .exe windows:6 windows x64 arch:x64

    456e8615ad4320c9f54e50319a19df9c


    Headers

    Imports

    Sections

  • pay.pyc