Overview

overview

10

Static

static

10

995adf5c2d...18.exe

windows7-x64

1

995adf5c2d...18.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    995adf5c2d4e4dd42b16ff29ffbddb2da914a53499cd7645b445544fbb8e5418

  • Size

    325KB

  • MD5

    d21a4d9282c5748fcb46843350a21548

  • SHA1

    1968af26efff7e9178d5debb0ef282049cb7ca92

  • SHA256

    995adf5c2d4e4dd42b16ff29ffbddb2da914a53499cd7645b445544fbb8e5418

  • SHA512

    b7409f86618f1ce27f6d7850b53e397f8a601d9bade5cce947e9bba78b89049d4ee16099e20ec75c50aa12abd08b1b05f2b3e9c174710cb5474e11e14a10e720

  • SSDEEP

    6144:dHCtLo+OPMHhMhu3TuSMSZr+AlUw/hWu6mQT2johaGmaoo:dooRMHhtjuvu+74WuMKjofmM

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://155.6.3.100:80/Dev/v3.39/LYLTWNOQU5

Attributes
  • user_agent

    Accept: application/xhtml+xml, text/html, application/xml Accept-Language: ar-ye Accept-Encoding: gzip, * User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.67 Safari/537.36

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 995adf5c2d4e4dd42b16ff29ffbddb2da914a53499cd7645b445544fbb8e5418
    .exe windows:6 windows x64 arch:x64

    6c490422d29c58dbbd2c64a0637a2a29


    Headers

    Imports

    Sections