Overview

overview

10

Static

static

10

f8e1276fdd...e0.exe

windows7-x64

10

f8e1276fdd...e0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f8e1276fdd656a550a1976242d80dcdd9a959903c049d5f42a8e03fc36be2ee0

  • Size

    40KB

  • MD5

    ca2405eb8a77430636ab80c079c11085

  • SHA1

    4195319151e7369336e14c75899616988bbeb440

  • SHA256

    f8e1276fdd656a550a1976242d80dcdd9a959903c049d5f42a8e03fc36be2ee0

  • SHA512

    bb66f939678945819c6620afb424cfc4d6588fa537c90bb3f29b4d1e8961d0db3e02ff7dfcc9e6641af2b56cd3e3510bfafa4050553ac6597fec944ce820720a

  • SSDEEP

    384:MWgnHmwO+my/9tfHWMKoZHQJFGNQvn+nAYw0wPhy37dx3BhD2Pf:Jkmh+mK97QJwOZdhO7XBhD6

Score
10/10
cobaltstrike

Malware Config

Extracted

Family

cobaltstrike

C2

http://1.12.233.147:1499/MDsY

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; MAAU)

Signatures

  • Cobaltstrike family
    cobaltstrike
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f8e1276fdd656a550a1976242d80dcdd9a959903c049d5f42a8e03fc36be2ee0
    .exe windows:6 windows x86 arch:x86

    9a6fd6a3ea88da3eaec6fa5e1f30ec8e


    Headers

    Imports

    Sections