Overview

overview

10

Static

static

10

7ab2b48059...fa.exe

windows7-x64

10

7ab2b48059...fa.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7ab2b480591e90c51667f5b415cd57c1e81bbfbbd83427db8ea99d474fe601fa

  • Size

    1.4MB

  • MD5

    fd58dee22ccf5e6d94c81809ed25235b

  • SHA1

    2e1fc71c9e9bdfe199e03216a6fae9ad48eb54d6

  • SHA256

    7ab2b480591e90c51667f5b415cd57c1e81bbfbbd83427db8ea99d474fe601fa

  • SHA512

    cd867c96f1d66c3ef0a8974c3d97791f95a824dccd7941dbb48f5d5b2c569e8b41784a8ddd7e9a3d6386d9cd02a722b951df84294ce77328c43b46cb95707d4e

  • SSDEEP

    24576:u6bgu2iE/QB1ATGiq/IuPRwZZGPb/YF/MNXRJZg8wQ7mYL:3guu//Hu4GPbQJMbJZC

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://47.109.26.55:8005/mVGS

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MATP; MATP)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7ab2b480591e90c51667f5b415cd57c1e81bbfbbd83427db8ea99d474fe601fa
    .exe windows:6 windows x64 arch:x64

    4f2f006e2ecf7172ad368f8289dc96c1


    Headers

    Imports

    Sections