Overview

overview

10

Static

static

10

4b631f8ae7...63.exe

windows7-x64

1

4b631f8ae7...63.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4b631f8ae74eb5e1fecd1c723c67c46f389df65dc1615c3ca8b8dfdaeba9d063

  • Size

    963KB

  • MD5

    4480d7c48e49702deddcef5d03b34daf

  • SHA1

    1fce57f12d65bb8f887b87d08d6b5ff9ea85f689

  • SHA256

    4b631f8ae74eb5e1fecd1c723c67c46f389df65dc1615c3ca8b8dfdaeba9d063

  • SHA512

    74b592c3845990e2071e2cddb1f67ded972802bd705297fb1e61fd28523c8445f32cf1d884a6697a00c6b35cab4a72fcb7c3d7b693afcff4c2eba5d287b204e2

  • SSDEEP

    12288:AiQS5ZSmjryStCZfb3jFVWI0TTwSnMx7/4+HVLy3ESVofxjKKA/Z:AlSbSILgfbjWdTT2XkkKHx

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.33.141:10086/1sGr

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; Touch; ASU2JS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4b631f8ae74eb5e1fecd1c723c67c46f389df65dc1615c3ca8b8dfdaeba9d063
    .exe windows:6 windows x64 arch:x64

    c2d457ad8ac36fc9f18d45bffcd450c2


    Headers

    Imports

    Sections