c:\Users\Admin\Downloads\Eternalblue-master\Eternalblue-master\Eternalblue\obj\Release\Eternalblue.pdb
General
-
Target
25aaecb70f0a09fd818f459bc0c989d12706778c7515e3fab0ea49c27e4a0fb9
-
Size
23KB
-
MD5
439250a1b24166a010c7658a24bf800e
-
SHA1
c86f61d42baa3241edfb4170c8af697eaa3bc87e
-
SHA256
25aaecb70f0a09fd818f459bc0c989d12706778c7515e3fab0ea49c27e4a0fb9
-
SHA512
34d776abe70c39090c8be3555a57135f2d5c634de1ac22152053a7c92c1d2e987925c2c30680c2d82ab231d15d8f3dd0631511183b820a855a09b9c53c2e3eb4
-
SSDEEP
384:SJmann0my70gXc5UgOHiPX236BYtzLOZK+c+o/4/cKpFFZid77FFAsy:SQa0f7EU7m24GzLXBw0KpnZypy
Score
10/10
Malware Config
Extracted
Family
cobaltstrike
C2
http://206.166.251.28:80/k2Pp
Attributes
-
user_agent
User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; BOIE9;ENUS)
Signatures
-
Cobaltstrike family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
25aaecb70f0a09fd818f459bc0c989d12706778c7515e3fab0ea49c27e4a0fb9
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections