Overview

overview

10

Static

static

10

84e1dbb754...3f.exe

windows7-x64

10

84e1dbb754...3f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    84e1dbb754f0c3e60d3a5e05a1a3e81d97f76bc4359fb3ee9ac4d0146b5af23f

  • Size

    1.8MB

  • MD5

    a5d553cd2a5cafcd5d832c5339c0a355

  • SHA1

    2d0bc7e552cb6beaaf26a2437df2b7b6ed204a1d

  • SHA256

    84e1dbb754f0c3e60d3a5e05a1a3e81d97f76bc4359fb3ee9ac4d0146b5af23f

  • SHA512

    b300ace660d2460363a2592df14d2d927e59353982f98816c5151887a92775b952f5b202a67b9b05271d6e5940fe9e3fad82749876f18f3d967d7cb9ea6b7b8e

  • SSDEEP

    24576:+DoNECpwq1V0gNTarmxsMRI2z14zAsWt+Ec0xMkU8JsU3Aobd0MzKskwF:ooNECpwBgNTaQRF5ywHd0MzKskwF

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://124.223.15.245:11111/vXAN

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; MAGWJS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 84e1dbb754f0c3e60d3a5e05a1a3e81d97f76bc4359fb3ee9ac4d0146b5af23f
    .exe windows:4 windows x64 arch:x64

    36ec58c9a4600c2528d6a545e432f310


    Headers

    Imports

    Sections