Overview

overview

10

Static

static

3

eb56925599...fb.exe

windows7-x64

10

eb56925599...fb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eb569255994353c671fdf6298a211ac9a9e6d5ebbd02d157afa5d3cdb7ed7bfb

  • Size

    240KB

  • Sample

    241119-z1zejasfke

  • MD5

    4fd1f174ada12230327fa6f2b30bda41

  • SHA1

    e786d6698bd44bcd8cab480f3817fde7ce3a461f

  • SHA256

    eb569255994353c671fdf6298a211ac9a9e6d5ebbd02d157afa5d3cdb7ed7bfb

  • SHA512

    d2cf3cf6e89d97ed54817aa600d2c8ccd10fbee514da5ed32d99545c68783de49794236953e47454af5999b1fbbf75254b80c797e7160236c838462e2e53d7f0

  • SSDEEP

    3072:LZJc+w1GhM+7IwuaW0bLm7rHR1hsGS4R8JmG2UjdiQLRbnmWqZKFus6/Kc+3:nu8WXR1hsGSc8Jm2JjmW8+

Score
10/10
cobaltstrikebackdoortrojan

Malware Config

Extracted

Family

cobaltstrike

C2

http://198.46.131.121:7111/W2nf

Attributes
  • user_agent

    User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)

Targets

    • Target

      eb569255994353c671fdf6298a211ac9a9e6d5ebbd02d157afa5d3cdb7ed7bfb

    • Size

      240KB

    • MD5

      4fd1f174ada12230327fa6f2b30bda41

    • SHA1

      e786d6698bd44bcd8cab480f3817fde7ce3a461f

    • SHA256

      eb569255994353c671fdf6298a211ac9a9e6d5ebbd02d157afa5d3cdb7ed7bfb

    • SHA512

      d2cf3cf6e89d97ed54817aa600d2c8ccd10fbee514da5ed32d99545c68783de49794236953e47454af5999b1fbbf75254b80c797e7160236c838462e2e53d7f0

    • SSDEEP

      3072:LZJc+w1GhM+7IwuaW0bLm7rHR1hsGS4R8JmG2UjdiQLRbnmWqZKFus6/Kc+3:nu8WXR1hsGSc8Jm2JjmW8+

    Score
    10/10
    cobaltstrikebackdoortrojan
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks