Overview

overview

10

Static

static

10

72f8833b7a...7a.dll

windows7-x64

10

72f8833b7a...7a.dll

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    72f8833b7ad03cbd3f195d3b82ec4630018475501c1e2f842a5b5e2eafeb127a

  • Size

    1.2MB

  • MD5

    e3a06558edac694a5ec974a658cfa0c8

  • SHA1

    75c8e895bd7c14eade2b76bc1352c0485398b3f7

  • SHA256

    72f8833b7ad03cbd3f195d3b82ec4630018475501c1e2f842a5b5e2eafeb127a

  • SHA512

    a2ad7394cb2d1ecc227197448502b13b8feebefed429e2d3aa4cef8374ebfb110f629442ccfa7b5095542b39f405087b71ceae88ca221dddeae3ffdcae8f8d01

  • SSDEEP

    12288:hpIMVkb0RBiIOF1NojKvLueEytY4jj5NT+Kcx4+oV0e+ErGo3ujfSv+rDiR+3w:hZB2IOHNUMjiZhpJKWrDik3w

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.11.129:48821/f3yK

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MASB)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 72f8833b7ad03cbd3f195d3b82ec4630018475501c1e2f842a5b5e2eafeb127a
    .dll windows:6 windows x64 arch:x64

    d245215a12ae106d4c07fb4d1af2019a


    Headers

    Imports

    Exports

    Sections