Overview

overview

10

Static

static

10

d75c117d47...24.exe

windows7-x64

10

d75c117d47...24.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d75c117d47f99f6fb3aedc03bb1cfde14d59261bd96dbe97a4dbbda41ab66724

  • Size

    53KB

  • MD5

    356918c6d25ffe59e8bdb47767b25bf6

  • SHA1

    e10692ba629d99dcebbd28501ba07b79889604ca

  • SHA256

    d75c117d47f99f6fb3aedc03bb1cfde14d59261bd96dbe97a4dbbda41ab66724

  • SHA512

    2f422f2d704405a142a50742d58e2fae64d9555800d4d832e318b23b50fafe708ad98fafc1fc42466d6dc24ae03ea743d5a9d6855dbe15cb6e658ac3c874b5b1

  • SSDEEP

    768:laVapYhNafEqTIYv4gKNwFPIlUK5A/+iAQWYW+o:AAuhOEqTIm4gKN2PIlUKwHI

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.20.93:4444/um1J

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MATP; MATP)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d75c117d47f99f6fb3aedc03bb1cfde14d59261bd96dbe97a4dbbda41ab66724
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections