Overview

overview

10

Static

static

10

2024-08-20...ch.exe

windows7-x64

1

2024-08-20...ch.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-08-20_28ef806a7c0662b37a59e89edc4853f9_cobalt-strike_snatch

  • Size

    2.0MB

  • MD5

    28ef806a7c0662b37a59e89edc4853f9

  • SHA1

    75c6fcfe5a13d7a47a25c6850233993b877e09f2

  • SHA256

    f51f6cd54d9a37f842f1d004fc24c1fc8591330b358f100aa2d4aca58ac0a7f3

  • SHA512

    4530cd7dbb3cdae8da5a04eb13b11c9e951e6a3392651aaf148fee667dc9c8a68fc0ab0d7bfc66fec89e4db1bfbb844ecfea52b40e44d4df42776cd6eb359709

  • SSDEEP

    49152:S+O+aOI4ZcO/gHxn0qLT1vhhD5ArcobY+igQOW:umCJVdAYosbgQO

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.1.105:443/jN7n

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-08-20_28ef806a7c0662b37a59e89edc4853f9_cobalt-strike_snatch
    .exe windows:6 windows x64 arch:x64

    9cbefe68f395e67356e2a5d8d1b285c0


    Headers

    Imports

    Sections