Overview

overview

10

Static

static

10

567df7ecf3...63.exe

windows7-x64

10

567df7ecf3...63.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    567df7ecf372bdf36ff04ebdb9a3f0f83e3eec096f1dd4ff4fc86939bfab5463

  • Size

    53KB

  • MD5

    bb442942814711edd1222e585b334bad

  • SHA1

    163928c7508334721595469a96d5b6dd620770ab

  • SHA256

    567df7ecf372bdf36ff04ebdb9a3f0f83e3eec096f1dd4ff4fc86939bfab5463

  • SHA512

    c689393dfbfc4f33623901d6f316cee1c27423516907cb281209f8ebdbfa9f7742783355971da7c415e550b2b825ee1d9c8e443a6d5183538a01b702e9536aed

  • SSDEEP

    768:hP5KygxFXdR9whXNpok31vpRq/iytIfCJ/Y+T:xExfR9whjok3xpRq/QC9J

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.11.129:48821/bk6Z

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 567df7ecf372bdf36ff04ebdb9a3f0f83e3eec096f1dd4ff4fc86939bfab5463
    .exe windows:4 windows x64 arch:x64

    20517f5146b66d2300bcbac82b941ba6


    Headers

    Imports

    Sections