Overview

overview

10

Static

static

10

62db5936e7...46.exe

windows7-x64

10

62db5936e7...46.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    62db5936e72724d703479fc61c9bd5dd13f398ccb980e42c09cd92edcc1c9b46

  • Size

    11KB

  • MD5

    bacb43877ca91f659bc04360d9f5634c

  • SHA1

    a0c73b440609dc49f0df6be9bc585895318bb447

  • SHA256

    62db5936e72724d703479fc61c9bd5dd13f398ccb980e42c09cd92edcc1c9b46

  • SHA512

    88e21b30579e128882e1e404980df8804acf72fe6c6b293cfcd11e60a45c1ae0b07eb8e960f57f4e503150a86d30245a810e73a9ecf9e67e9c1ab090e3062777

  • SSDEEP

    192:QmgQHu4ElCO+YQ6ttYpPm54Z3Q5tfBD1txZ:QpQHu4iQ1z3ixZ

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://service-9cjgv9d1-1327547884.bj.tencentapigw.com.cn:443/bootstrap-2.min.js

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/5.0) Host: service-9cjgv9d1-1327547884.bj.tencentapigw.com.cn

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 62db5936e72724d703479fc61c9bd5dd13f398ccb980e42c09cd92edcc1c9b46
    .exe windows:6 windows x64 arch:x64

    2afd3ecc1a99ac0e22d849d2993b0050


    Headers

    Imports

    Sections