General

  • Target

    2a367d9d6dee7afa5c97ae81175b25f8ee4ef25f9969954f7a9156d451df9a65.zip

  • Size

    148KB

  • MD5

    590e5259b56fc28a4864cd52068a4c1b

  • SHA1

    f1aaaeca5305bf094c03acae8ed11434e54112b9

  • SHA256

    2380497830eefdd215a60e45db75bb05f570767f1d8b1f2cc00fe8facf9ebdb6

  • SHA512

    a813aba36fb9294dec3298c0dca03e800ecf41a2e5ea49d092caca2d744484e072cbee834a9cbc89d43c1c2ecde0d8c47eaddc5414add3b8b0880001959df873

  • SSDEEP

    3072:t/S6yNtDSNrkIUNNZCJa6gc+s/mi5GmLTE9OQalxnN:t/SXNUkHCJapc+446595

Score
10/10

Malware Config

Signatures

  • Cobalt Strike reflective loader 1 IoCs

    Detects the reflective loader used by Cobalt Strike.

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2a367d9d6dee7afa5c97ae81175b25f8ee4ef25f9969954f7a9156d451df9a65.zip
    .zip

    Password: infected

  • 2a367d9d6dee7afa5c97ae81175b25f8ee4ef25f9969954f7a9156d451df9a65
    .dll windows:5 windows x86 arch:x86

    Password: infected


    Headers

    Sections