Overview

overview

10

Static

static

3

9e3637a3ec...38.exe

windows7-x64

7

9e3637a3ec...38.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9e3637a3ec006eb7fbf6e81ff228abe21a5cf74aa208e7e9e15c3d9215580a38

  • Size

    8.4MB

  • Sample

    241119-fmbxjazqfs

  • MD5

    91e352c8caba1de73fe431e59acaac4a

  • SHA1

    7c87b68ee7015f1d9b2fb64de691b668777d1b00

  • SHA256

    9e3637a3ec006eb7fbf6e81ff228abe21a5cf74aa208e7e9e15c3d9215580a38

  • SHA512

    58a1ce37864ade478811c33bc2bda3c373eff96046bfaf113b06aeb925bc6d1aab7d730eb0c4dbc6713753c7e2fd47ef3337ab7137af1bf5837fd0aead0a32ee

  • SSDEEP

    196608:KWLaAXqCQcXMCHGLLc54i1wN+yjXx5nDasqWQ2dTNUGqlF+iITmbvM:7xqCQcXMCHWUjKjx5WsqWxTwiTWU

Score
10/10
cobaltstrikebackdoorpyinstallertrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://192.168.92.216:80/wSb1

Attributes
  • user_agent

    User-Agent: Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Win64; x64; Trident/6.0)

Targets

    • Target

      9e3637a3ec006eb7fbf6e81ff228abe21a5cf74aa208e7e9e15c3d9215580a38

    • Size

      8.4MB

    • MD5

      91e352c8caba1de73fe431e59acaac4a

    • SHA1

      7c87b68ee7015f1d9b2fb64de691b668777d1b00

    • SHA256

      9e3637a3ec006eb7fbf6e81ff228abe21a5cf74aa208e7e9e15c3d9215580a38

    • SHA512

      58a1ce37864ade478811c33bc2bda3c373eff96046bfaf113b06aeb925bc6d1aab7d730eb0c4dbc6713753c7e2fd47ef3337ab7137af1bf5837fd0aead0a32ee

    • SSDEEP

      196608:KWLaAXqCQcXMCHGLLc54i1wN+yjXx5nDasqWQ2dTNUGqlF+iITmbvM:7xqCQcXMCHWUjKjx5WsqWxTwiTWU

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks