C:\Windows\Microsoft.NET\Framework\v4.0.30319\Temporary ASP.NET Files\vs\05015755\ab21fb48\App_Web_qv3bqj2a.pdb
General
-
Target
cfb774cddc9ff761daf0f732479a2bcbfc688d67b19561b59e51e5e29044e1cb
-
Size
14KB
-
MD5
1a8b3812de5b2e774036df5e50948a4f
-
SHA1
23acd4985e68377862a0439de884169431643ab9
-
SHA256
cfb774cddc9ff761daf0f732479a2bcbfc688d67b19561b59e51e5e29044e1cb
-
SHA512
38b58ec638e2d399ec8f8e225ddac189d58123bfc3592f692aab1fff2eed43d2e05318e32f1e56a80dbab57cc67f927f6d8bc82bddf82d2d16ae7ff82262bf0e
-
SSDEEP
192:nkjjG3Pyk/qZFtMswLCTpfB+63HWFEzajdaGInopTgQNMwCDsV6DI:k32R/IFBwLqf+3daE0QNMwCD+l
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://192.168.13.40:4431/8ipL
Attributes
-
user_agent
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; GTB7.4; InfoPath.2)
Signatures
-
Cobaltstrike family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
cfb774cddc9ff761daf0f732479a2bcbfc688d67b19561b59e51e5e29044e1cb
dae02f32a21e03ce65412f6e56942daa
Headers
Imports
Sections