Static task
static1
Behavioral task
behavioral1
Sample
2024-10-18_c740ba1ea33dad1cc041850775bb93ee_cobalt-strike_lockbit.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2024-10-18_c740ba1ea33dad1cc041850775bb93ee_cobalt-strike_lockbit.exe
Resource
win10v2004-20241007-en
General
-
Target
2024-10-18_c740ba1ea33dad1cc041850775bb93ee_cobalt-strike_lockbit
-
Size
492KB
-
MD5
c740ba1ea33dad1cc041850775bb93ee
-
SHA1
3f143754f8540e48d34164db2940a034f17b1442
-
SHA256
b2f40c53d83beb1623c8a487bd876bc6067342fb723973365722e86064c248c5
-
SHA512
9986e966ff969b6f1fff1eb83d0f62af0a652e1056ab7e22278dfacab637244afa1b46d349a6ff5c0b909aca535e1832a3f6c873491183f92be60479c05ba8a9
-
SSDEEP
6144:GHdhPDjUVFPeDADETZZX+t4Z0dS7jNt5z1GpxQol0XAD35m0ampO83rvdcpw/Vzs:GzDQL2iqjQeKQG5+YVd/td
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2024-10-18_c740ba1ea33dad1cc041850775bb93ee_cobalt-strike_lockbit
Files
-
2024-10-18_c740ba1ea33dad1cc041850775bb93ee_cobalt-strike_lockbit.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 416KB - Virtual size: 412KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ