Overview

overview

10

Static

static

3

64ab290400...d5.exe

windows7-x64

1

64ab290400...d5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    64ab2904008a9851433e2af1006236edf7c106263011c8a8adc3a85bfeed5ed5

  • Size

    1.0MB

  • Sample

    241118-y7qwasvfkq

  • MD5

    bcc2c26b1eb0f312f39b76b6ef09469f

  • SHA1

    407292f93465c2f5fe17e8799ddf377b4739e04e

  • SHA256

    64ab2904008a9851433e2af1006236edf7c106263011c8a8adc3a85bfeed5ed5

  • SHA512

    a2062bb1bd545b18e89a6f57dde9a46e17e7fbb33e194f19df1d6b46ccd4820360f0ac6afd4ee3f3232d40bc9c150fc7dee30176ec230cd2dabf50a215b75a10

  • SSDEEP

    24576:dnOq6K1HpJFhBlXx0bQJDAlgckIaczFsUuRgsIBI:d3vZpJFRJHckIachsr+sIBI

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://calendar.techcloudmedia.com:4433/samlss/contentDoor.gif

Attributes
  • user_agent

    Host: calendar.techcloudmedia.com Connection: close User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203

Targets

    • Target

      64ab2904008a9851433e2af1006236edf7c106263011c8a8adc3a85bfeed5ed5

    • Size

      1.0MB

    • MD5

      bcc2c26b1eb0f312f39b76b6ef09469f

    • SHA1

      407292f93465c2f5fe17e8799ddf377b4739e04e

    • SHA256

      64ab2904008a9851433e2af1006236edf7c106263011c8a8adc3a85bfeed5ed5

    • SHA512

      a2062bb1bd545b18e89a6f57dde9a46e17e7fbb33e194f19df1d6b46ccd4820360f0ac6afd4ee3f3232d40bc9c150fc7dee30176ec230cd2dabf50a215b75a10

    • SSDEEP

      24576:dnOq6K1HpJFhBlXx0bQJDAlgckIaczFsUuRgsIBI:d3vZpJFRJHckIachsr+sIBI

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks