Overview

overview

10

Static

static

10

e43dc825d2...90.exe

windows7-x64

10

e43dc825d2...90.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e43dc825d27b68c403e2d9dd7b0a93275c53c7905dcc1b7c307a6a557c8b8a90

  • Size

    136KB

  • MD5

    67a172b0a8116e2c15201b0259f4ee2f

  • SHA1

    15135607edc6bdffbc1dcc323e2a1a7ade0686f6

  • SHA256

    e43dc825d27b68c403e2d9dd7b0a93275c53c7905dcc1b7c307a6a557c8b8a90

  • SHA512

    9e842e3dd69e0114a82ca4fb22fc09d130380a59350ac8d33c94eef887e0ebd1b3c02a84f3244d757516931c6eb234fe049270026398f0e2280cff24d22c7ee3

  • SSDEEP

    3072:x8juuqju/ymR7TP+jQoZvnfScOMwKl0f:xNfju/r7TPaZvn6UOf

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.1.213:1103relaysec001

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0; MAARJS)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e43dc825d27b68c403e2d9dd7b0a93275c53c7905dcc1b7c307a6a557c8b8a90
    .exe windows:6 windows x64 arch:x64

    1bef5e95bde100433fc5e731f4d26c70


    Headers

    Imports

    Sections