Overview

overview

10

Static

static

10

b830d4132a...77.exe

windows7-x64

10

b830d4132a...77.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b830d4132a275c25cca93992278e65f629fb24bd0d8e3c5c69f4370f3e78f677

  • Size

    11KB

  • MD5

    94582a199b9d039cee17dfbf8dbe9b90

  • SHA1

    2222dab18a11ed998f74e921aaf0aa48d9a6750b

  • SHA256

    b830d4132a275c25cca93992278e65f629fb24bd0d8e3c5c69f4370f3e78f677

  • SHA512

    dc5391db3cda70e48b3faf23d6b0f5e91d1a9991acd0fe74ec13917ddafc8c1ff96a7089eb997b8c5d6155871c84385f4aa21af2dcb2fb81c1a90922e22b7946

  • SSDEEP

    192:yaLWMUnHZ/3+8bqQetykNhpXMboMmYl2Psb8gGW5tfMcxc/:dMnHt/uQeFhaYWtGyc/

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.184.130:443/66xy

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; Trident/4.0; .NET CLR 2.0.50727)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b830d4132a275c25cca93992278e65f629fb24bd0d8e3c5c69f4370f3e78f677
    .exe windows:6 windows x64 arch:x64

    d95623a200cf8472cbdd9faae06d452a


    Headers

    Imports

    Sections