Overview

overview

10

Static

static

3

7b011639d5...a6.exe

windows7-x64

10

7b011639d5...a6.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7b011639d5b961722e147a39076014566b9578b44fdbd9c7d74274e4b29941a6

  • Size

    19KB

  • Sample

    241118-gtj26a1bkp

  • MD5

    8f2fe410614b408ef6eb2f5cbafd6d32

  • SHA1

    286b9fcda44141f77902cf0567cd645f47e2d6da

  • SHA256

    7b011639d5b961722e147a39076014566b9578b44fdbd9c7d74274e4b29941a6

  • SHA512

    ce624d22eb1e484c07aefec9b8796703c995ca1755367c8bca08c9997c7b478fc2afeb8c738a2b176aa475b95fed7893fb0d817d55f40a16cc993fedeccf24dc

  • SSDEEP

    192:oV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/243Kk4rRaWF8qa1Dojjgi:aqaCF31cix+Dc4zjDQrRDFF46gi

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://8.137.70.196:5555/nWSE

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; MANM)

Targets

    • Target

      7b011639d5b961722e147a39076014566b9578b44fdbd9c7d74274e4b29941a6

    • Size

      19KB

    • MD5

      8f2fe410614b408ef6eb2f5cbafd6d32

    • SHA1

      286b9fcda44141f77902cf0567cd645f47e2d6da

    • SHA256

      7b011639d5b961722e147a39076014566b9578b44fdbd9c7d74274e4b29941a6

    • SHA512

      ce624d22eb1e484c07aefec9b8796703c995ca1755367c8bca08c9997c7b478fc2afeb8c738a2b176aa475b95fed7893fb0d817d55f40a16cc993fedeccf24dc

    • SSDEEP

      192:oV7qaCF6Op1t2dobVXujRDcBaXWQjwOT/243Kk4rRaWF8qa1Dojjgi:aqaCF31cix+Dc4zjDQrRDFF46gi

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks