Overview

overview

10

Static

static

10

3ad324c1ce...11.exe

windows7-x64

1

3ad324c1ce...11.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3ad324c1ce42bd070d9c61c6be9f27392413b6878264bddd98625b6eb2af0d11

  • Size

    1.4MB

  • MD5

    bdfbe19b73fc554d510ed1b2e0d45ad1

  • SHA1

    ec9abfde3ef1377f74ed1c555bd40ebe7ed103e2

  • SHA256

    3ad324c1ce42bd070d9c61c6be9f27392413b6878264bddd98625b6eb2af0d11

  • SHA512

    dba3816ee297dbd5cf4416f2bdb747c25aaf620e6540f9631fc23d33c5e1f9dd1bd8467c34e8e53c4a9c7c5bf1af6c475927ddbda1fddde9a8c34ce9bf1ce4bf

  • SSDEEP

    24576:gKtvSHiFgPTYCAEf8SCJJK6Zgjc3PfdD1:g0qHiF2YBEfrCJDZgj4PVD1

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://39.98.196.145:8443/TBqV

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MANM)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3ad324c1ce42bd070d9c61c6be9f27392413b6878264bddd98625b6eb2af0d11
    .exe windows:6 windows x64 arch:x64

    f0ea7b7844bbc5bfa9bb32efdcea957c


    Headers

    Imports

    Sections