General

  • Target

    fa9a9c08977c0e8e778b7961c23c525878da225fb7cffcf8e766c50490752d77

  • Size

    6.3MB

  • MD5

    6803d90bcdad1aea81f711272e56cf6f

  • SHA1

    d6043ec37cf58392659a0ea4b4c6896a594f63df

  • SHA256

    fa9a9c08977c0e8e778b7961c23c525878da225fb7cffcf8e766c50490752d77

  • SHA512

    42887a6d58d9e8afdb7971141ea934847641968706404fd2d2e41a226195c6d5ea056da30663fc6d5d6a9204eb3fb20ae795abef60f5e123eff7b1876b2da352

  • SSDEEP

    98304:h+vMoSbPWDSN7fbHcuZeAV8u0+8NyoHiM:AvMoSzWDS8

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://82.156.69.103:4000/adIO

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0) LBBROWSER

Signatures

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fa9a9c08977c0e8e778b7961c23c525878da225fb7cffcf8e766c50490752d77
    .exe windows:6 windows x64 arch:x64

    47034886867910a6c402fb5223b99d0d


    Headers

    Imports

    Sections