Overview

overview

10

Static

static

10

9206a4b37f...58.exe

windows7-x64

10

9206a4b37f...58.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9206a4b37ff5d15bd61e58483bb5f51df0bea90a483b6346701e2077bdab4258

  • Size

    93KB

  • MD5

    165c0fc71fb0f7fcec62811116f5b634

  • SHA1

    3e44a0b4f151a881d51bf0660a015e306c33e789

  • SHA256

    9206a4b37ff5d15bd61e58483bb5f51df0bea90a483b6346701e2077bdab4258

  • SHA512

    831f6e15b15b76bb477a3e08741ff9c173e8ad5c486234c1d8e853928619e674a7d0868bc8377e554037ac8164c0d30680b7e93b22b0149b5bef56d2bfc8cff3

  • SSDEEP

    1536:tY4HAybOLsZSx/ZtsBQXHwUVxdnX+5EqTIm4gKN2P8Jd84h9lKASE:H0XtVxJuLTKNBd8aHuE

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.3.27:88/SZAo

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; ASU2JS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9206a4b37ff5d15bd61e58483bb5f51df0bea90a483b6346701e2077bdab4258
    .exe windows:4 windows x64 arch:x64

    2202b776aa9d4d1d4b6b940b728f2923


    Headers

    Imports

    Sections