Overview

overview

10

Static

static

10

artifact.exe

windows7-x64

10

artifact.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    artifact.bin

  • Size

    242KB

  • MD5

    42dbb803af5713d66220268ad9f51450

  • SHA1

    724ba4a80c5224ed8390e5b211ba3490d43174ac

  • SHA256

    83ddbfe900e183831d7fa0898527c0902cd37fcc6af492b5addde6c5388c19c0

  • SHA512

    c85373b9ff10c3d6b8d2b5bda97351f92eb86c6ee3094356acf7a303803f597f752069346f4601ef39263a48a9c82c15b211340637530ba47c3c90b3d6525f25

  • SSDEEP

    1536:FAdhgEqTIm4gKN2PIlY9qCL/EgZfffffffffffffffffffffffffffxffffffffB:HTKNRKfZB8OscrbK4uK4I

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.20.93:4444/um1J

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MATP; MATP)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • artifact.bin
    .exe windows:4 windows x64 arch:x64

    aedeace88c22991329d77b4400b84512


    Headers

    Imports

    Sections