Overview

overview

10

Static

static

10

449ee3ff8f...01.exe

windows7-x64

1

449ee3ff8f...01.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    449ee3ff8f40587c80e22b53bb0c6b186d0ccfb1060ddb50923e515d7389a701

  • Size

    1.7MB

  • MD5

    b69480d1ff694ceb05a1aaa51bf593cb

  • SHA1

    cad93f9df71262ea3a30c9ac74b877a887558c6b

  • SHA256

    449ee3ff8f40587c80e22b53bb0c6b186d0ccfb1060ddb50923e515d7389a701

  • SHA512

    c59aff25f8a17e07abd46bf04da60ea32f037bbd2fd888dd89b637c0fe8a69d73b526cc8b4793a349bfc6da58a25369c23faad34319be2df18b9c96e31b79476

  • SSDEEP

    24576:3mLHEcMNSg04jvGfcfxD0lHWqbs1Legk8pdg5V8Yu0QtzbAie2:3GhoBZxDiLs88pdWqX5e2

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.137.130:8888/v95y

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0; MAARJS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 449ee3ff8f40587c80e22b53bb0c6b186d0ccfb1060ddb50923e515d7389a701
    .exe windows:6 windows x64 arch:x64

    d42595b695fc008ef2c56aabd8efd68e


    Headers

    Imports

    Sections