Overview

overview

10

Static

static

10

dd85b453e1...dc.exe

windows7-x64

10

dd85b453e1...dc.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    dd85b453e165d6498920e14af8d4afc8ea6869eb07cb37e7c2d6be9c45e164dc

  • Size

    2.2MB

  • MD5

    09a0e6818d4fc75beba7fe61657c9716

  • SHA1

    7343eb73fc372b7e5735541cbf37704a3d8080cf

  • SHA256

    dd85b453e165d6498920e14af8d4afc8ea6869eb07cb37e7c2d6be9c45e164dc

  • SHA512

    18ff2ea38919977661b7794c977bf8f0aaa8586d5f42e7091808d7f07dd3b396362f0b44e6a5a63c34c4b42209a2808bfd6c7a180e5e376297b968fe327ff03d

  • SSDEEP

    24576:YJhhrb0alM1iYFq+viN/yw9D5UiBfrpwBJ6clMi81s3AnaSEL5D:YJhhrb0YM1iYFq+vwNSaaSEL5D

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.1.47:443/uA7p

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dd85b453e165d6498920e14af8d4afc8ea6869eb07cb37e7c2d6be9c45e164dc
    .exe windows:4 windows x64 arch:x64

    e43cd3bc4e1df3c81e0c4192bcf452c0


    Headers

    Imports

    Sections