Overview

overview

10

Static

static

10

c7ca7c0932...92.exe

windows7-x64

10

c7ca7c0932...92.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c7ca7c09323ee36a2c0796ba3c067ebae7bd759a99c6e0ed920c3958fbaa1792

  • Size

    1.3MB

  • MD5

    cfcc0ca248476fc65629b686bceba6d0

  • SHA1

    ad6b81db60825ab1c5d9cfe59b152c02890b4d9b

  • SHA256

    c7ca7c09323ee36a2c0796ba3c067ebae7bd759a99c6e0ed920c3958fbaa1792

  • SHA512

    e1c3ddb75b017b081b8c8d91f76cfbc63de395319f458f949e2a3555c81436704410ae43d8024eefc7c1cf6bec04acc01941872f9e25001895666c616d1f7311

  • SSDEEP

    24576:Ix2vkQVU5WXZCUu2H307WUv3ZgayLSygQz2nnsLr:Ix2BVUkXZCUus30CAZgaOSyj2nnI

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.128.129:8888/pJIZ

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c7ca7c09323ee36a2c0796ba3c067ebae7bd759a99c6e0ed920c3958fbaa1792
    .exe windows:6 windows x64 arch:x64

    f0ea7b7844bbc5bfa9bb32efdcea957c


    Headers

    Imports

    Sections