General

  • Target

    93aa010fc5a7510f1329c769c4eafbcc1450d8ff8290a10d5d4b87e17a99e2e2

  • Size

    2.0MB

  • MD5

    6b3e305e531e4e08358a7e26a8d1c331

  • SHA1

    3992c50eacbfcdfb3f81ba005b4555206445a896

  • SHA256

    93aa010fc5a7510f1329c769c4eafbcc1450d8ff8290a10d5d4b87e17a99e2e2

  • SHA512

    223bc3cb0032b05093a8472a3b44da5826bc1d3f32d7779397045cbedd22f0a19c3f840b713ebf1a63635e04500f5d9b18ccff908fac3bed712fa310030b24da

  • SSDEEP

    49152:j1XUTPNXsOBTuLtc7VnWXldh+Zv2XkQ+m1cXR1LfBU8QfS:VIN8sOcCdIvckQdgjLS

Malware Config

Extracted

Family

cobaltstrike

C2

http://1.117.72.154:28887/tBaF

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; NP08; MAAU; NP08)

Signatures

  • Cobaltstrike family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 93aa010fc5a7510f1329c769c4eafbcc1450d8ff8290a10d5d4b87e17a99e2e2
    .exe windows:5 windows x64 arch:x64

    5324ac1e1bceff69ec8d4435c50bfe0e


    Headers

    Imports

    Sections

  • test.pyc

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.