Overview

overview

10

Static

static

10

67719d6fc7...a9.exe

windows7-x64

10

67719d6fc7...a9.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    67719d6fc76dfa91dd06b63a3e30ed4e29a3e71c0611b5fea6441919de4097a9

  • Size

    6KB

  • MD5

    c0c523427e53d60b2ed73f88dc8877f2

  • SHA1

    80bf91d81837776142d478259ab05ec48648975a

  • SHA256

    67719d6fc76dfa91dd06b63a3e30ed4e29a3e71c0611b5fea6441919de4097a9

  • SHA512

    3f9e1ff569cd948ca32cbccb86e1bc1489a3f23a5d8e1d9363b6b9caf42378907d29abe69ab5e98dc5f335f53eb83e65fbbfbfdd2e249e9ea18bbb947bc72f1e

  • SSDEEP

    96:2SeDo9G3tuL9BwhveU5VjcS0713WGDOU9hZwL7lvbzNt:2kYtuZBDSVQS0sQhZMv9

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://124.71.14.193:7456/9kOj

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 67719d6fc76dfa91dd06b63a3e30ed4e29a3e71c0611b5fea6441919de4097a9
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections