Overview

overview

10

Static

static

10

cf23b19cd4...0N.exe

windows7-x64

1

cf23b19cd4...0N.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    cf23b19cd432008873d3ae8d2a4b8d70N.exe

  • Size

    12KB

  • MD5

    cf23b19cd432008873d3ae8d2a4b8d70

  • SHA1

    8019b97b534a744d466e2817f9ab7008fd8e2cc9

  • SHA256

    77f6d1f985e9ebc3659e5ba04c7e76a0107583a9cdfe2799e45f68108841261e

  • SHA512

    87c5bcce0e9f474deb0309625363ebd92f9d1cda87c49591613a9e8529b3ec19d1b0324ad268a248c9d9c04fa3effb7783c40809acc0cdfd97352ea2f4eade70

  • SSDEEP

    192:5Dg/9tq9WflA8gYg9LeoaQI5XH3k2B3Q5tfMcj:I9tq9W3gYYLTaf5X3t3

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://172.29.66.143:80/7xjD

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.0; WOW64; Trident/5.0)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cf23b19cd432008873d3ae8d2a4b8d70N.exe
    .exe windows:6 windows x64 arch:x64

    0bbfda4b1ee22ddf5b8a6c601e272ff1


    Headers

    Imports

    Sections