Overview

overview

10

Static

static

10

nimwhispers.exe

windows7-x64

10

nimwhispers.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    nimwhispers.exe

  • Size

    262KB

  • MD5

    22db6458c458b402831e8b74621e8a1d

  • SHA1

    d4f1438bc1d39eef7fe39bd9ee5e21e988930b1f

  • SHA256

    580809c7c05f1630c637690c41db2ddea7feb0e230bf92f51deebaa495b46736

  • SHA512

    7291d1c9d25ae6ef0372dbec1e07fb742acc8e3ce0798161915c5bbe21c163684f02a7f070cde74b0e6d8fa63f99a6e1ab212e9dd8383f9f8080d2d487340c03

  • SSDEEP

    6144:IIn0gFc1UIE1gt395GTe83dMNJJJ655ZZo9W+Kki:IIn0Ac1UIE1gt3Kv3p+K1

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://state-mgmt.us:443/amJE

Attributes
  • user_agent

    User-Agent: Microsoft-CryptoAPI/6.1

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • nimwhispers.exe
    .exe windows:4 windows x64 arch:x64

    f179925339083472a1e26a19f1c16147


    Headers

    Imports

    Sections