Overview

overview

10

Static

static

10

2024-08-20...ch.exe

windows7-x64

1

2024-08-20...ch.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-08-20_6b4f2df942f611c1a93f83f425d21658_cobalt-strike_snatch

  • Size

    2.0MB

  • MD5

    6b4f2df942f611c1a93f83f425d21658

  • SHA1

    e392b0ac6b9b3dd55c27e2bdc517770310258d6b

  • SHA256

    58714e2e0bb85973a7836af1de4b2924b419c41589bb6a03e403530379185bf0

  • SHA512

    c1fbb1a215bfa3f342ce3b384e459cbf352ae289ba42e0d55b5b4a1fcd9ba2f3146248e43adc7c4baca0552fc9f3567763e8e338f2faac8682a5bdcfe44000f5

  • SSDEEP

    49152:LMvTG7l35uZBggHxn44LT1T452/BZ3ZMqZk7S:z2zsmBZ2qt

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.1.105:443/jN7n

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-08-20_6b4f2df942f611c1a93f83f425d21658_cobalt-strike_snatch
    .exe windows:6 windows x64 arch:x64

    9cbefe68f395e67356e2a5d8d1b285c0


    Headers

    Imports

    Sections