General

  • Target

    368f9d1600fde374875f1bd5f6be9759271c3ba184f421469bd406cf74f1fcdf

  • Size

    337KB

  • MD5

    9596c67f16c85cc130d51fecf49cecb1

  • SHA1

    22dc379ba4cdf01b9712df26858effb17bd2b301

  • SHA256

    368f9d1600fde374875f1bd5f6be9759271c3ba184f421469bd406cf74f1fcdf

  • SHA512

    d25977288f82483ab8600addd7fd5882ebefe6312cd87f8407ad9dfd790741c388c6f146e3af61829d8075f2ff26b4b7875d1078dcc4d452efc1e40608a9223a

  • SSDEEP

    3072:T9V0Ls6/pzTk0FM0Z/U1U8MawctlrA1FBRsw1gwCelc2:THCsspzTk0FMEqMnqPwCgT

Score
10/10

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.0.104:8080/HMRv

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; BOIE9;ENGB)

Signatures

  • Cobaltstrike family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 368f9d1600fde374875f1bd5f6be9759271c3ba184f421469bd406cf74f1fcdf
    .exe windows:6 windows x64 arch:x64

    5dcc74c04c767561c049190303a4951c


    Headers

    Imports

    Sections